codiedev@0.9.23
Connect Claude Code, Codex, Cursor, or VS Code Copilot to Codiedev for org-wide session capture and artifact collaboration
AI Security Review
scanned 4mo ago · by lpm-firewall-aiThe high-risk primitives are aligned with the package's declared purpose and are activated by explicit connection/setup or installed hooks, not by npm install/import. Static inspection did not find credential harvesting beyond the configured token, unrelated exfiltration, hidden lifecycle execution, or unconsented agent control-surface mutation.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs codiedev connect, then agent hooks run during Claude/Codex/Cursor sessions.
Impact
Session transcripts and selected artifact markdown are uploaded to the configured Codiedev backend for the user's org.
Mechanism
consented session capture and artifact sync
AI rationale
The high-risk primitives are aligned with the package's declared purpose and are activated by explicit connection/setup or installed hooks, not by npm install/import. Static inspection did not find credential harvesting beyond the configured token, unrelated exfiltration, hidden lifecycle execution, or unconsented agent control-surface mutation.
Evidence
package.jsondist/cli.jsdist/connect.jsdist/hook.jsdist/utils.jsdist/backup/run.jsdist/backup/match.jsdist/commands/shared.js~/.codiedev/config.json~/.claude/settings.json~/.claude/CLAUDE.md~/.codex/hooks.json~/.codex/AGENTS.md~/.cursor/hooks.json~/.cursor/rules/codiedev.mdc~/.codiedev/capture-log.jsonl
Network endpoints3
cli.codiedev.comcodiedev.comregistry.npmjs.org/codiedev/latest
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- dist/hook.js reads agent transcript_path and uploads base64 transcript to configured backend during installed hooks.
- dist/utils.js can write user agent configs: ~/.claude/settings.json, ~/.codex/hooks.json, ~/.codex/AGENTS.md, ~/.claude/CLAUDE.md.
- dist/hook.js and dist/backup/run.js spawn detached node children for capture/backup upload work.
Evidence against
- package.json has no install/postinstall hook; prepublishOnly only runs tsc before publishing.
- dist/cli.js exposes normal user-invoked commands; connect help clearly describes installing session-capture hooks.
- dist/connect.js validates a user-provided token and writes ~/.codiedev/config.json before hook installation.
- Network hosts are package-aligned Codiedev endpoints, with CODIEDEV_URL override for configured backend.
- dist/backup/match.js only selects markdown artifact paths and denies AGENTS.md, CLAUDE.md, .git, .claude, node_modules, dist.
- No obfuscated payload, eval/Function, or import-time execution found in inspected entrypoints.
Behavioral surface
ChildProcess
Source & flagged code
5 flaggeddist/hook.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = codiedev@0.9.22
matchedIdentity = npm:Y29kaWVkZXY:0.9.22
similarity = 0.947
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version.
dist/hook.jsView on unpkg42const http = __importStar(require("http"));
L43: const child_process_1 = require("child_process");
L44: const utils_1 = require("./utils");
High
dist/backup/match.jsView file
20contains invisible/control Unicode U+FEFF (zero width no-break space)
const m = md.match(/^<U+FEFF>?---\s*\n([\s\S]*?)\n---/);
Critical
Trojan Source Unicode
Findings
3 Critical3 High3 Medium5 Low
CriticalTrojan Source Unicodedist/backup/match.js
CriticalTrigger Reachable Dangerous Capabilitydist/backup/match.js
CriticalPrevious Version Dangerous Deltadist/hook.js
HighChild Processdist/hook.js
HighShell
HighCross File Remote Execution Contextdist/utils.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codiedev@0.9.23.
See all versions of codiedev for other recorded verdicts.
- Review the evidence and your use of codiedev@0.9.23 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.