Loading npm security reports…

codex-mobile-re@0.1.120: Malicious npm security report (Block) | LPM Firewall

registry / codex-mobile-re / 0.1.120

codex-mobile-re@0.1.120

Mobile-first web interface and gateway for Codex app-server (fork rebuild of codexapp)

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Running the CLI can silently configure a default third-party model provider when Codex authentication is absent. Requests, including prompts and possible tool outputs, are proxied to that provider.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Start the package CLI without usable Codex authentication, or enable its free mode.

Impact

Sensitive prompts, instructions, and tool-output content can be disclosed to OpenCode Zen or OpenRouter without clear informed consent.

Mechanism

Default third-party provider redirection with embedded obfuscated API keys.

Attack narrative

The executable creates an enabled OpenCode Zen configuration by default when it cannot find Codex authentication. Its proxy reads model request bodies, including input and instructions, serializes them, and sends them upstream. A separate free-mode route draws credentials from a bundled XOR-obfuscated key pool and persists an OpenRouter configuration. This creates an opaque third-party path for user and agent content during normal CLI use.

AI rationale

The package contains concrete runtime redirection of model traffic and embedded obfuscated credentials, not merely optional user-supplied networking. Its benign node-pty postinstall hook does not mitigate the default disclosure path.

Evidence

dist-cli/index.js.codex/webui-custom-providers.json

Network endpoints3

opencode.ai/zen/v1openrouter.ai/api/v1/responses/api/v1/chat/completions

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/fix-pty-native-build.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/assets/DirectoryHub-B5fr6TY2.jsView file

2patternName = google_api_key severity = high line = 2

High

High Secret

Package contains a high-severity secret pattern.

dist/assets/DirectoryHub-B5fr6TY2.jsView on unpkg · L2

2patternName = google_api_key severity = high line = 2

High

Secret Pattern

Google API key in dist/assets/DirectoryHub-B5fr6TY2.js

dist/assets/DirectoryHub-B5fr6TY2.jsView on unpkg · L2

dist/assets/common-BeuopZEI.jsView file

1function ur(r){return r&&r.__esModule&&Object.prototype.hasOwnProperty.call(r,"default")?r.default:r}var fn,lt;function gr(){if(lt)return fn;lt=1;function r(n){return n instanceof ... L2: https://github.com/highlightjs/highlight.js/issues/2277`),te=u,q=A),P===void 0&&(P=!0);const fe={code:q,language:te};Je("before:highlight",fe);const Re=fe.result?fe.result:ze(fe.la...

High

Child Process

Package source references child process execution.

dist/assets/common-BeuopZEI.jsView on unpkg · L1

•matchType = normalized_sha256 matchedPackage = codex-mobile-re@0.1.121 matchedPath = dist/assets/common-BeuopZEI.js matchedIdentity = npm:Y29kZXgtbW9iaWxlLXJl:0.1.121 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/assets/common-BeuopZEI.jsView on unpkg

dist-cli/index.jsView file

3Source sends the broad process environment to a literal external destination. L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist-cli/index.jsView on unpkg · L3

3Trigger-reachable chain: manifest.bin -> dist-cli/index.js L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist-cli/index.jsView on unpkg · L3

Source & flagged code

14 flagged

package.jsonView file

Lines 34-74json

34 "dist-cli/",

35 "scripts/dev.cjs",

36 "scripts/dev-random-home.cjs",

37 "scripts/fix-pty-native-build.cjs"

38 ],

39 "pnpm": {

40 "onlyBuiltDependencies": [

41 "@firebase/util",

42 "esbuild",

43 "node-pty",

44 "protobufjs"

45 ]

46 },

47 "scripts": {

48 "dev": "node scripts/dev.cjs",

49 "dev2": "node scripts/dev-random-home.cjs",

50 "dev:open": "pnpm run build:cli && sh -c 'pnpm run dev & VPID=$!; node dist-cli/index.js --open-project \"${1:-.}\"; wait $VPID' --",

51 "build:frontend": "vue-tsc --noEmit && vite build",

52 "build:cli": "tsup",

53 "build": "pnpm run build:frontend && pnpm run build:cli",

54 "postinstall": "node scripts/fix-pty-native-build.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L54

55 "test:unit": "vitest run",

56 "preview": "vite preview",

57 "prepublishOnly": "pnpm run build",

58 "profile:browser": "node scripts/profile-browser-runtime.cjs",

59 "profile:thread": "PROFILE_ROUTE='#/thread/019da7c0-4e12-7a91-837c-f7c11cc8ab6c' node scripts/profile-browser-runtime.cjs"

60 },

61 "dependencies": {

62 "@composio/client": "0.1.0-alpha.66",

63 "@xterm/addon-fit": "^0.11.0",

64 "@xterm/xterm": "^6.0.0",

65 "commander": "^13.1.0",

66 "express": "^5.1.0",

67 "firebase": "^12.2.1",

68 "highlight.js": "^11.11.1",

69 "qrcode-terminal": "^0.12.0",

70 "ws": "^8.18.3"

71 },

72 "optionalDependencies": {

73 "node-pty": "^1.1.0"

74 },

dist/assets/DirectoryHub-B5fr6TY2.jsView file

Lines 1-3javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/index.esm-Cxn_LBGD.js","assets/index.esm-Bx2Y2PLG.js","assets/index.esm-DYMAm9mq.js"])))=>i.map(i

dist/assets/common-BeuopZEI.jsView file

Lines 1-6javascript

1function ur(r){return r&&r.__esModule&&Object.prototype.hasOwnProperty.call(r,"default")?r.default:r}var fn,lt;function gr(){

dist-cli/index.jsView file

3Source sends the broad process environment to a literal external destination. L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist-cli/index.jsView on unpkg · L3

3Trigger-reachable chain: manifest.bin -> dist-cli/index.js L3: // src/cli/index.ts L4: import { createServer as createServer2 } from "http"; L5: import { chmodSync as chmodSync2, createWriteStream, existsSync as existsSync14, mkdirSync as mkdirSync2 } from "fs"; ... L8: import { isAbsolute as isAbsolute13, join as join31, resolve as resolve8 } from "path"; L9: import { spawn as spawn9 } from "child_process"; L10: import { createInterface as createInterface2 } from "readline/promises"; ... L34: function needsCmdExeWrapper(command) { L35: if (process.platform !== "win32") { L36: return false; ... L50: return { L51: command: "cmd.exe", L52: args: ["/d", "/s", "/c", [quoteCmdExeArg(command), ...args.map((arg) => quoteCmdExeArg(arg))].join(" ")]

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist-cli/index.jsView on unpkg · L3