codiedev@0.9.54
Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package’s reviewed network and hook behavior matches its stated agent-capture and collaboration purpose, and the harness requires an explicitly configured Codiedev key. There is no install-time execution hook or evidence of credential theft or unrelated account actions.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs Codiedev connect to configure agent hooks, or explicitly launches the codie harness.
Impact
Agent prompts and session content may be shared with the configured Codiedev service as part of the package’s advertised functionality.
Mechanism
Configured hooks send prompts or session data to the configured Codiedev backend for skill discovery and session capture. The harness uses a Codiedev key with the Codiedev gateway.
AI rationale
The package’s reviewed network and hook behavior matches its stated agent-capture and collaboration purpose, and the harness requires an explicitly configured Codiedev key. There is no install-time execution hook or evidence of credential theft or unrelated account actions.
Evidence
dist/utils.jsdist/hook.jsdist/codie.js
Network endpoints2
gateway.codiedev.comcli.codiedev.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes its purpose as connecting coding agents to Codiedev for team session capture and artifact collaboration.
- Prompt discovery sends a prompt to the configured backend only when a config exists, and the hook passes through a local capture exclusion check first.
- The hook setup labels its actions as session capture and skill discovery, matching the package’s stated purpose.
- The harness requires a Codiedev key and uses the Codiedev gateway for its approved model catalog.
Evidence against
- The package has no preinstall, install or postinstall script; its only lifecycle script is prepublishOnly.
- Agent hooks can transmit prompts and session data after the user connects an agent, so those features involve sharing user content with the configured Codiedev service.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
5 flaggeddist/hook.jsView file
41const http = __importStar(require("http"));
L42: const child_process_1 = require("child_process");
L43: const utils_1 = require("./utils");
High
dist/codie.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = codiedev@0.9.24
matchedIdentity = npm:Y29kaWVkZXY:0.9.24
similarity = 0.526
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/codie.jsView on unpkg49const path = __importStar(require("path"));
L50: const child_process_1 = require("child_process");
L51: const url_1 = require("url");
...
L58: const result = (0, child_process_1.spawnSync)("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
L59: return result.status === 0 ? result.stdout.trim() : "";
L60: }
...
L74: function existingInlineConfig() {
L75: const raw = process.env.OPENCODE_CONFIG_CONTENT;
L76: if (!raw)
...
L78: try {
L79: return JSON.parse(raw);
L80: }
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/codie.js
HighChild Processdist/hook.js
HighShell
HighSandbox Evasion Gated Capabilitydist/codie.js
HighCross File Remote Execution Contextdist/utils.js
HighSemantic Analysis Limitedassets/git-refs.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codiedev@0.9.54.
See all versions of codiedev for other recorded verdicts.
- Review the evidence and your use of codiedev@0.9.54 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.