codiedev@0.9.57
Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package’s network and file activity supports its stated team session-capture and harness features. Setup is triggered by the user running `codiedev connect`, and the manifest declares no install hook that would run during a registry install.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Users run `codiedev connect` to set up capture, then agent sessions invoke the installed hooks; `codie` runs the harness when launched.
Impact
Session data is shared with the configured Codiedev workspace as described by the package; no unrelated credential collection or malicious action was identified.
Mechanism
Connect installs documented hooks and instructions. Hooks send session transcripts to the configured Codiedev backend. The harness uses a pinned OpenCode engine and Codiedev gateway.
AI rationale
The package’s network and file activity supports its stated team session-capture and harness features. Setup is triggered by the user running `codiedev connect`, and the manifest declares no install hook that would run during a registry install.
Evidence
~/.claude/settings.json~/.claude/CLAUDE.md~/.codex/hooks.json~/.codex/AGENTS.md~/.cursor/hooks.json~/.cursor/rules/codiedev.mdc~/.config/opencode/plugins/codiedev.js
Network endpoints3
cli.codiedev.comgateway.codiedev.comregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes team session capture and artifact collaboration as the package’s purpose.
- The only lifecycle script is prepublishOnly, which runs the TypeScript build; no install hook is declared.
- The CLI runs the hook setup through the explicit connect command, which tells users it will install session capture hooks for org-wide sharing.
- Capture payloads contain session transcript content, matching the stated session-sharing feature.
- The doctor command sends the saved token to config.backendUrl for token validation.
Evidence against
- The package installs hooks and agent instructions into global configuration paths, but the connect flow describes this setup and invokes it only when the user runs connect.
- Session transcripts are uploaded automatically by the installed capture hooks; this matches the package’s stated purpose.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
5 flaggeddist/hook.jsView file
43const http = __importStar(require("http"));
L44: const child_process_1 = require("child_process");
L45: const utils_1 = require("./utils");
High
dist/codie.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = codiedev@0.9.24
matchedIdentity = npm:Y29kaWVkZXY:0.9.24
similarity = 0.526
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/codie.jsView on unpkg49const path = __importStar(require("path"));
L50: const child_process_1 = require("child_process");
L51: const url_1 = require("url");
...
L63: const result = (0, child_process_1.spawnSync)("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
L64: return result.status === 0 ? result.stdout.trim() : "";
L65: }
...
L79: function existingInlineConfig() {
L80: const raw = process.env.OPENCODE_CONFIG_CONTENT;
L81: if (!raw)
...
L83: try {
L84: return JSON.parse(raw);
L85: }
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/codie.js
HighChild Processdist/hook.js
HighShell
HighSandbox Evasion Gated Capabilitydist/codie.js
HighCross File Remote Execution Contextdist/utils.js
HighSemantic Analysis Limitedassets/git-refs.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codiedev@0.9.57.
See all versions of codiedev for other recorded verdicts.
- Review the evidence and your use of codiedev@0.9.57 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.