codex-supervisor-mcp@0.5.6: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

codex-supervisor-mcp@0.5.6: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./src/setup.js --auto --quiet

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./src/setup.js --auto --quiet

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

49"postinstall": "node ./src/setup.js --auto --quiet", "setup": "node ./src/setup.js", "start": "node ./src/mcp-server.js", "monitor": "tsx ./src/monitor.jsx", "clean

Medium

Suspicious Lifecycle Evidence

The npm postinstall hook runs setup automatically in auto mode.

package.jsonView on unpkg · L49

src/setup.jsView file

44label: "Claude Code", L45: skillRoot: join(homedir(), ".claude", "skills"), L46: binary: "claude", ... L49: }, L50: { id: "agents", label: "~/.agents", skillRoot: join(homedir(), ".agents", "skills"), binary: null }, L51: { ... L53: label: "Codex", L54: skillRoot: join(homedir(), ".codex", "skills"), L55: binary: "codex", ... L208: } L209: await mkdir(dirname(destination), { recursive: true }); L210: await writeFile(destination, source);

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/setup.jsView on unpkg · L44

•matchType = normalized_sha256 matchedPackage = codex-supervisor-mcp@0.5.3 matchedPath = src/setup.js matchedIdentity = npm:Y29kZXgtc3VwZXJ2aXNvci1tY3A:0.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/setup.jsView on unpkg

src/bin-resolver.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/bin-resolver.js#virtual:normalized:round1View on unpkg

src/codex-runner.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = codex-supervisor-mcp@0.5.5 matchedIdentity = npm:Y29kZXgtc3VwZXJ2aXNvci1tY3A:0.5.5 similarity = 0.714 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/codex-runner.jsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 29-69json

29 "files": [

30 "src/mcp-server.js",

31 "src/bin-resolver.js",

32 "src/setup.js",

33 "src/codex-runner.js",

34 "src/task-store.js",

35 "src/goal-store.js",

36 "src/event-parser.js",

37 "src/worktree.js",

38 "src/truncate.js",

39 "src/status.js",

40 "src/paths.js",

41 "src/prompt.js",

42 "src/cleanup.js",

43 "src/monitor.jsx",

44 "skills/",

45 "README.md",

46 "LICENSE"

47 ],

48 "scripts": {

49 "postinstall": "node ./src/setup.js --auto --quiet",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L49

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L49

50 "setup": "node ./src/setup.js",

51 "start": "node ./src/mcp-server.js",

52 "monitor": "tsx ./src/monitor.jsx",

53 "cleanup": "node ./src/cleanup.js",

Medium

Suspicious Lifecycle Evidence

The npm postinstall hook runs setup automatically in auto mode.

package.jsonView on unpkg · L49

54 "test": "node ./src/bin-resolver-test.js && node ./src/truncate-test.js && node ./src/status-test.js && node ./src/migration-test.js && node ./src/setup-test.js && node ./src/setup-windows-test.js && node ./src/regression-test.js",

55 "test:real": "node ./src/real-codex-test.js",

56 "smoke": "node ./src/smoke-test.js",

57 "smoke:followup": "node ./src/followup-smoke-test.js",

58 "smoke:mcp": "node ./src/mcp-smoke-test.js",

59 "smoke:mcp-wait": "node ./src/mcp-wait-smoke-test.js"

60 },

61 "dependencies": {

62 "@modelcontextprotocol/sdk": "^1.21.0"

63 },

64 "optionalDependencies": {

65 "ink": "^7.0.2",

66 "react": "^19.2.6",

67 "tsx": "^4.21.0"

68 },

69 "engines": {

src/setup.jsView file

Lines 24-64javascript

24} from "./bin-resolver.js";

25

26const run = promisify(execFile);

27

28const packageRoot = dirname(dirname(fileURLToPath(

src/bin-resolver.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/bin-resolver.js#virtual:normalized:round1View on unpkg

src/codex-runner.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = codex-supervisor-mcp@0.5.5 matchedIdentity = npm:Y29kZXgtc3VwZXJ2aXNvci1tY3A:0.5.5 similarity = 0.714 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/codex-runner.jsView on unpkg