registry  /  @youdie006/prodex  /  0.16.6

@youdie006/prodex@0.16.6

Local receipt bus for coordinating Codex execution with ChatGPT Pro/Projects consultation.

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 23 file(s), 511 KB of source, external domains: 127.0.0.1, chatgpt.com, github.com

Source & flagged code

2 flagged · loading source
dist/chatgpt-browser.jsView file
1import { spawn, spawnSync } from "node:child_process"; L2: import { accessSync, constants, readFileSync, statSync } from "node:fs"; ... L109: return explicit; L110: const fromEnv = process.env.PRODEX_CDP_PORT; L111: if (fromEnv !== undefined && fromEnv !== "") { ... L140: export function defaultChatGptProfileDir() { L141: return path.join(os.homedir(), ".local", "share", "prodex", "chrome-chatgpt-pro"); L142: } ... L166: try { L167: const parsed = JSON.parse(await readFile(lastBrowserLoginPath(), "utf8")); L168: return { ... L243: "(npm i -g @youdie006/prodex@latest); if it persists, report it at " +
High
Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/chatgpt-browser.jsView on unpkg · L1
•matchType = previous_version_dangerous_delta matchedPackage = @youdie006/prodex@0.8.1 matchedIdentity = npm:QHlvdWRpZTAwNi9wcm9kZXg:0.8.1 similarity = 0.364 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chatgpt-browser.jsView on unpkg

Findings

2 High3 Medium5 Low
HighSandbox Evasion Gated Capabilitydist/chatgpt-browser.js
HighPrevious Version Dangerous Deltadist/chatgpt-browser.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings