Loading npm security reports…

codex-mobile-re@0.1.115: Malicious npm security report (Block) | LPM Firewall

registry / codex-mobile-re / 0.1.115

codex-mobile-re@0.1.115

Mobile-first web interface and gateway for Codex app-server (fork rebuild of codexapp)

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Running the CLI can silently route Codex requests through a third-party provider when Codex authentication is absent. Prompt content, tool inputs, and outputs are forwarded upstream.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

Start the CLI without usable Codex authentication, then use Codex through its app-server.

Impact

Sensitive prompts, instructions, tool data, and generated responses may be disclosed to opencode.ai without an explicit provider choice.

Mechanism

Automatic provider redirection and HTTP proxying of Codex request payloads.

Attack narrative

The CLI tests for usable Codex authentication and, if absent, enables an OpenCode Zen provider by default. It injects this provider into the spawned Codex app-server configuration and proxies request bodies to the external service. The proxy converts message, instruction, tool, and tool-output fields before posting them upstream. The package also conceals a pool of provider keys and can persist a decoded key in Codex home.

AI rationale

The automatic fallback changes the model provider and transmits Codex request data to an external service without an explicit user selection. The concealed key pool reinforces that this is deliberate opaque routing rather than a transparent local interface.

Evidence

dist-cli/index.js.codex/auth.json.codex/webui-custom-providers.json

Network endpoints2

opencode.ai/zen/v1/api/v1

Source & flagged code

15 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/fix-pty-native-build.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/assets/DirectoryHub-Ciz8rVK4.jsView file

2patternName = google_api_key severity = high line = 2

High

High Secret

Package contains a high-severity secret pattern.

dist/assets/DirectoryHub-Ciz8rVK4.jsView on unpkg · L2

2patternName = google_api_key severity = high line = 2

High

Secret Pattern

Google API key in dist/assets/DirectoryHub-Ciz8rVK4.js

dist/assets/DirectoryHub-Ciz8rVK4.jsView on unpkg · L2

dist/assets/common-BeuopZEI.jsView file

1function ur(r){return r&&r.__esModule&&Object.prototype.hasOwnProperty.call(r,"default")?r.default:r}var fn,lt;function gr(){if(lt)return fn;lt=1;function r(n){return n instanceof ... L2: https://github.com/highlightjs/highlight.js/issues/2277`),te=u,q=A),P===void 0&&(P=!0);const fe={code:q,language:te};Je("before:highlight",fe);const Re=fe.result?fe.result:ze(fe.la...

High

Child Process

Package source references child process execution.

dist/assets/common-BeuopZEI.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = codex-mobile-re@0.1.114 matchedPath = dist/assets/common-BeuopZEI.js matchedIdentity = npm:Y29kZXgtbW9iaWxlLXJl:0.1.114 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/assets/common-BeuopZEI.jsView on unpkg

dist-cli/index.jsView file

3Source sends the broad process environment to a literal external destination. L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist-cli/index.jsView on unpkg · L3

3Trigger-reachable chain: manifest.bin -> dist-cli/index.js L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist-cli/index.jsView on unpkg · L3

Source & flagged code

15 flagged

package.jsonView file

Lines 34-74json

34 "dist-cli/",

35 "scripts/dev.cjs",

36 "scripts/dev-random-home.cjs",

37 "scripts/fix-pty-native-build.cjs"

38 ],

39 "pnpm": {

40 "onlyBuiltDependencies": [

41 "@firebase/util",

42 "esbuild",

43 "node-pty",

44 "protobufjs"

45 ]

46 },

47 "scripts": {

48 "dev": "node scripts/dev.cjs",

49 "dev2": "node scripts/dev-random-home.cjs",

50 "dev:open": "pnpm run build:cli && sh -c 'pnpm run dev & VPID=$!; node dist-cli/index.js --open-project \"${1:-.}\"; wait $VPID' --",

51 "build:frontend": "vue-tsc --noEmit && vite build",

52 "build:cli": "tsup",

53 "build": "pnpm run build:frontend && pnpm run build:cli",

54 "postinstall": "node scripts/fix-pty-native-build.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L54

55 "test:unit": "vitest run",

56 "preview": "vite preview",

57 "prepublishOnly": "pnpm run build",

58 "profile:browser": "node scripts/profile-browser-runtime.cjs",

59 "profile:thread": "PROFILE_ROUTE='#/thread/019da7c0-4e12-7a91-837c-f7c11cc8ab6c' node scripts/profile-browser-runtime.cjs"

60 },

61 "dependencies": {

62 "@composio/client": "0.1.0-alpha.66",

63 "@xterm/addon-fit": "^0.11.0",

64 "@xterm/xterm": "^6.0.0",

65 "commander": "^13.1.0",

66 "express": "^5.1.0",

67 "firebase": "^12.2.1",

68 "highlight.js": "^11.11.1",

69 "qrcode-terminal": "^0.12.0",

70 "ws": "^8.18.3"

71 },

72 "optionalDependencies": {

73 "node-pty": "^1.1.0"

74 },

dist/assets/DirectoryHub-Ciz8rVK4.jsView file

Lines 1-3javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/index.esm-Cxn_LBGD.js","assets/index.esm-Bx2Y2PLG.js","assets/index.esm-DYMAm9mq.js"])))=>i.map(i

dist/assets/common-BeuopZEI.jsView file

Lines 1-6javascript

1function ur(r){return r&&r.__esModule&&Object.prototype.hasOwnProperty.call(r,"default")?r.default:r}var fn,lt;function gr(){

dist-cli/index.jsView file

3Source sends the broad process environment to a literal external destination. L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist-cli/index.jsView on unpkg · L3

3Trigger-reachable chain: manifest.bin -> dist-cli/index.js L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist-cli/index.jsView on unpkg · L3