codiedev@0.9.56
Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install-time hook, and the examined credential and session-data flows go to the configured Codiedev backend or its default gateway for the package’s stated functionality. Process execution supports the launched harness and capture workflow; no unrelated or concealed behavior was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Users run the CLI, harness, or configured agent capture hooks.
Impact
Expected service use and session capture; no unrelated credential destination or concealed execution was found.
Mechanism
The doctor command validates the saved Codiedev token against the configured backend; the harness uses a Codiedev gateway key; session hooks report session metadata to that backend.
AI rationale
The manifest has no install-time hook, and the examined credential and session-data flows go to the configured Codiedev backend or its default gateway for the package’s stated functionality. Process execution supports the launched harness and capture workflow; no unrelated or concealed behavior was found.
Network endpoints4
config.backendUrl/api/cli/validateTokenconfig.backendUrl/api/cli/lastCaptureconfig.backendUrl/api/cli/sessionStartgateway.codiedev.com/api/v1
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle script is prepublishOnly, which runs the TypeScript build; no install hook is declared.
- The doctor command sends the saved Codiedev token to the configured Codiedev backend for token validation and capture status.
- The Codie launcher requires a Codiedev gateway key or a token saved by connecting a Codiedev account before starting its runtime.
- The session-start hook sends a session ID and timestamp to the configured backend when capture configuration exists.
Evidence against
- The package presents itself as a Codiedev CLI and governed AI coding harness, consistent with the inspected network and process behavior.
- The doctor requests are directed to config.backendUrl, and the harness uses the Codiedev gateway URL by default.
- The flagged process launches support the harness runtime and detached session-capture work; no unrelated payload execution was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggeddist/hook.jsView file
43const http = __importStar(require("http"));
L44: const child_process_1 = require("child_process");
L45: const utils_1 = require("./utils");
High
dist/codie.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = codiedev@0.9.24
matchedIdentity = npm:Y29kaWVkZXY:0.9.24
similarity = 0.526
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/codie.jsView on unpkg49const path = __importStar(require("path"));
L50: const child_process_1 = require("child_process");
L51: const url_1 = require("url");
...
L58: const result = (0, child_process_1.spawnSync)("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
L59: return result.status === 0 ? result.stdout.trim() : "";
L60: }
...
L74: function existingInlineConfig() {
L75: const raw = process.env.OPENCODE_CONFIG_CONTENT;
L76: if (!raw)
...
L78: try {
L79: return JSON.parse(raw);
L80: }
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/codie.js
HighChild Processdist/hook.js
HighShell
HighSandbox Evasion Gated Capabilitydist/codie.js
HighCross File Remote Execution Contextdist/utils.js
HighSemantic Analysis Limitedassets/git-refs.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codiedev@0.9.56.
See all versions of codiedev for other recorded verdicts.
- Review the evidence and your use of codiedev@0.9.56 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.