codiedev@0.9.55
Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install-time execution hook, and the flagged process, network, and configuration activity occurs through the harness or agent capture flows. The reviewed credential use targets the configured Codiedev service, while the new diagnostics summarize activity without storing prompts, commands, or tool output.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The prepublishOnly script runs when publishing; the codie command runs when invoked, and capture hooks run after the user connects an agent.
Impact
No concrete malicious behavior found. The package handles project metadata and session data for its advertised collaboration features.
Mechanism
The harness uses a Codiedev gateway key and configured gateway/backend; capture uploads session data, subject to local exclusion checks. New diagnostic signals contain summarized timing, skill, and tool-call metadata.
AI rationale
The manifest has no install-time execution hook, and the flagged process, network, and configuration activity occurs through the harness or agent capture flows. The reviewed credential use targets the configured Codiedev service, while the new diagnostics summarize activity without storing prompts, commands, or tool output.
Evidence
dist/codie.jsdist/hook.jsdist/utils.jsdist/captureSignals.jsdist/commands/doctor.js
Network endpoints3
gateway.codiedev.com/api/v1${config.backendUrl}/api/captureSession${config.backendUrl}/api/cli/lastCapture
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes its purpose as connecting coding agents to Codiedev for session capture and artifact collaboration.
- The manifest has no install, preinstall, or postinstall hook; its only lifecycle script is prepublishOnly.
- The Codie harness requires a Codiedev gateway key and sends it with the harness environment when the user runs the command.
- The harness supplies repository URL, branch, and commit metadata to the launched engine as part of its stated governed coding workflow.
- The new capture signals summarize timing, skill names, and tool-call counts; the parser states that it does not persist prompts, commands, or tool output.
- Capture hooks check local exclusions before making requests, and session payloads are uploaded to the configured Codiedev backend.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
5 flaggeddist/hook.jsView file
43const http = __importStar(require("http"));
L44: const child_process_1 = require("child_process");
L45: const utils_1 = require("./utils");
High
dist/codie.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = codiedev@0.9.24
matchedIdentity = npm:Y29kaWVkZXY:0.9.24
similarity = 0.526
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/codie.jsView on unpkg49const path = __importStar(require("path"));
L50: const child_process_1 = require("child_process");
L51: const url_1 = require("url");
...
L58: const result = (0, child_process_1.spawnSync)("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
L59: return result.status === 0 ? result.stdout.trim() : "";
L60: }
...
L74: function existingInlineConfig() {
L75: const raw = process.env.OPENCODE_CONFIG_CONTENT;
L76: if (!raw)
...
L78: try {
L79: return JSON.parse(raw);
L80: }
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/codie.js
HighChild Processdist/hook.js
HighShell
HighSandbox Evasion Gated Capabilitydist/codie.js
HighCross File Remote Execution Contextdist/utils.js
HighSemantic Analysis Limitedassets/git-refs.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codiedev@0.9.55.
See all versions of codiedev for other recorded verdicts.
- Review the evidence and your use of codiedev@0.9.55 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.