registry / codex-plus-patcher / 0.18.0

codex-plus-patcher@0.18.0

Patch queue tool for building local ChatGPT Plus or Codex Plus apps from installed OpenAI desktop apps.

AI Security Review

scanned 4d ago · by lpm-firewall-ai

The package is an explicit desktop-app patcher. Release mode can download an archive selected by CLI arguments and load its JavaScript patch index, then modify a copied OpenAI desktop-app bundle.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `codex-plus-patcher apply --mode release --github-repo <owner/repo>` or supplies a dev patch directory.

Impact

A malicious user-selected release asset or patch directory can execute as the invoking user and produce a modified desktop app.

Mechanism

Download/extract and dynamically require patch code, then rewrite and sign a target app bundle.

Rationale

Source inspection found an explicit, dangerous dual-use remote patch-loader and app-bundle mutator, but no lifecycle-triggered behavior, exfiltration, or stealth persistence. Warn rather than block because activation requires deliberate CLI arguments or a user-chosen patch directory.

Evidence

package.jsonsrc/cli.jssrc/core/release.jssrc/core/patch-engine.jssrc/core/audit-fixture.js~/.cache/codex-plus-patcherContents/Resources/app.asarContents/Info.plistauth.json

Network endpoints2

api.github.com/repos/${repo}/releases/latest/repos/${repo}/releases/tags/${encodeURIComponent(tag)}

codex-plus-patcher@0.18.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code