Loading npm security reports…

codex-mobile-re@0.1.114: Malicious npm security report (Block) | LPM Firewall

registry / codex-mobile-re / 0.1.114

codex-mobile-re@0.1.114

Mobile-first web interface and gateway for Codex app-server (fork rebuild of codexapp)

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The CLI silently selects an unofficial model provider when Codex authentication is absent. Requests handled by its local gateway are forwarded to that provider.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Run codex-mobile-re without existing Codex authentication or an explicit provider configuration.

Impact

Prompts, instructions, tool data, and model requests can be disclosed to opencode.ai without an explicit provider choice.

Mechanism

Automatic provider redirection through a local request proxy.

Attack narrative

Starting the CLI without Codex authentication causes it to create an enabled OpenCode Zen provider state. It injects that provider into the spawned app-server configuration, then its local proxy reads request bodies and forwards them to opencode.ai using a public token. The package also includes a large XOR-obfuscated key pool for a separate community provider. This makes third-party transmission of Codex request content automatic rather than an explicit user-selected integration.

AI rationale

The package automatically redirects Codex traffic to an unofficial external service and obscures bundled provider credentials. This is concrete unauthorized data exfiltration behavior, despite a narrow native-build repair postinstall hook.

Evidence

dist-cli/index.js.codex/webui-custom-providers.json

Network endpoints2

opencode.ai/zen/v1/responsesopencode.ai/zen/v1/chat/completions

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/fix-pty-native-build.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/assets/DirectoryHub-KyUPwrZv.jsView file

2patternName = google_api_key severity = high line = 2

High

High Secret

Package contains a high-severity secret pattern.

dist/assets/DirectoryHub-KyUPwrZv.jsView on unpkg · L2

2patternName = google_api_key severity = high line = 2

High

Secret Pattern

Google API key in dist/assets/DirectoryHub-KyUPwrZv.js

dist/assets/DirectoryHub-KyUPwrZv.jsView on unpkg · L2

dist/assets/common-BeuopZEI.jsView file

1function ur(r){return r&&r.__esModule&&Object.prototype.hasOwnProperty.call(r,"default")?r.default:r}var fn,lt;function gr(){if(lt)return fn;lt=1;function r(n){return n instanceof ... L2: https://github.com/highlightjs/highlight.js/issues/2277`),te=u,q=A),P===void 0&&(P=!0);const fe={code:q,language:te};Je("before:highlight",fe);const Re=fe.result?fe.result:ze(fe.la...

High

Child Process

Package source references child process execution.

dist/assets/common-BeuopZEI.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = codex-mobile-re@0.1.97 matchedPath = dist/assets/common-BeuopZEI.js matchedIdentity = npm:Y29kZXgtbW9iaWxlLXJl:0.1.97 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/assets/common-BeuopZEI.jsView on unpkg

dist-cli/index.jsView file

3Source sends the broad process environment to a literal external destination. L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist-cli/index.jsView on unpkg · L3

3Trigger-reachable chain: manifest.bin -> dist-cli/index.js L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist-cli/index.jsView on unpkg · L3

Source & flagged code

13 flagged

package.jsonView file

Lines 34-74json

34 "dist-cli/",

35 "scripts/dev.cjs",

36 "scripts/dev-random-home.cjs",

37 "scripts/fix-pty-native-build.cjs"

38 ],

39 "pnpm": {

40 "onlyBuiltDependencies": [

41 "@firebase/util",

42 "esbuild",

43 "node-pty",

44 "protobufjs"

45 ]

46 },

47 "scripts": {

48 "dev": "node scripts/dev.cjs",

49 "dev2": "node scripts/dev-random-home.cjs",

50 "dev:open": "pnpm run build:cli && sh -c 'pnpm run dev & VPID=$!; node dist-cli/index.js --open-project \"${1:-.}\"; wait $VPID' --",

51 "build:frontend": "vue-tsc --noEmit && vite build",

52 "build:cli": "tsup",

53 "build": "pnpm run build:frontend && pnpm run build:cli",

54 "postinstall": "node scripts/fix-pty-native-build.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L54

55 "test:unit": "vitest run",

56 "preview": "vite preview",

57 "prepublishOnly": "pnpm run build",

58 "profile:browser": "node scripts/profile-browser-runtime.cjs",

59 "profile:thread": "PROFILE_ROUTE='#/thread/019da7c0-4e12-7a91-837c-f7c11cc8ab6c' node scripts/profile-browser-runtime.cjs"

60 },

61 "dependencies": {

62 "@composio/client": "0.1.0-alpha.66",

63 "@xterm/addon-fit": "^0.11.0",

64 "@xterm/xterm": "^6.0.0",

65 "commander": "^13.1.0",

66 "express": "^5.1.0",

67 "firebase": "^12.2.1",

68 "highlight.js": "^11.11.1",

69 "qrcode-terminal": "^0.12.0",

70 "ws": "^8.18.3"

71 },

72 "optionalDependencies": {

73 "node-pty": "^1.1.0"

74 },

dist/assets/DirectoryHub-KyUPwrZv.jsView file

2patternName = google_api_key severity = high line = 2

High

High Secret

Package contains a high-severity secret pattern.

dist/assets/DirectoryHub-KyUPwrZv.jsView on unpkg · L2

2patternName = google_api_key severity = high line = 2

High

Secret Pattern

Google API key in dist/assets/DirectoryHub-KyUPwrZv.js

dist/assets/DirectoryHub-KyUPwrZv.jsView on unpkg · L2

dist/assets/common-BeuopZEI.jsView file

1function ur(r){return r&&r.__esModule&&Object.prototype.hasOwnProperty.call(r,"default")?r.default:r}var fn,lt;function gr(){if(lt)return fn;lt=1;function r(n){return n instanceof ... L2: https://github.com/highlightjs/highlight.js/issues/2277`),te=u,q=A),P===void 0&&(P=!0);const fe={code:q,language:te};Je("before:highlight",fe);const Re=fe.result?fe.result:ze(fe.la...

High

Child Process

Package source references child process execution.

dist/assets/common-BeuopZEI.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = codex-mobile-re@0.1.97 matchedPath = dist/assets/common-BeuopZEI.js matchedIdentity = npm:Y29kZXgtbW9iaWxlLXJl:0.1.97 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/assets/common-BeuopZEI.jsView on unpkg

dist-cli/index.jsView file

3Source sends the broad process environment to a literal external destination. L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist-cli/index.jsView on unpkg · L3

3Trigger-reachable chain: manifest.bin -> dist-cli/index.js L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist-cli/index.jsView on unpkg · L3