codiedev@0.9.78
Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package’s lifecycle script only compiles source, and reviewed token flows target the configured Codiedev backend or gateway. Process execution and local configuration access are consistent with its CLI, capture, and harness purpose.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Explicit CLI commands or configured agent hooks; no install-time action beyond compilation for prepublishOnly.
Impact
No unsolicited credential disclosure, unrelated collection, or harmful default action was found.
Mechanism
Uses the configured Codiedev backend and gateway, and starts the local harness or capture helper when invoked.
AI rationale
The package’s lifecycle script only compiles source, and reviewed token flows target the configured Codiedev backend or gateway. Process execution and local configuration access are consistent with its CLI, capture, and harness purpose.
Network endpoints2
gateway.codiedev.comcli.codiedev.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle script is prepublishOnly, which runs the TypeScript compiler.
- The doctor command sends the Codiedev token to the configured backend for token validation and capture status.
- The Codie harness uses a Codiedev gateway key and contacts gateway.codiedev.com for its approved model catalog.
- Doctor runs only when the CLI dispatches the doctor or verify command.
Evidence against
- The package includes subprocess execution for its governed AI harness and capture hooks.
- The package can access local configuration and environment variables as part of its CLI and harness functions.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/piRuntime.jsView file
48const path = __importStar(require("path"));
L49: const child_process_1 = require("child_process");
L50: const codieRuntimeInstall_1 = require("./codieRuntimeInstall");
High
dist/selfUpdate.jsView file
298* The .ps1 shims missing from a Windows npm prefix. The IT kit deletes them so
L299: * PowerShell falls back to the .cmd shims, which run under the Restricted
L300: * execution policy Windows client machines default to; `npm i -g` puts them
High
dist/codie.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = codiedev@0.9.24
matchedIdentity = npm:Y29kaWVkZXY:0.9.24
similarity = 0.421
summary = stored previous version shares package body but lacks this dangerous source file
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/codie.js
HighChild Processdist/piRuntime.js
HighShelldist/selfUpdate.js
HighSandbox Evasion Gated Capabilitydist/codie.js
HighCross File Remote Execution Contextdist/utils.js
HighSemantic Analysis Limitedassets/git-refs.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codiedev@0.9.78.
See all versions of codiedev for other recorded verdicts.
- Review the evidence and your use of codiedev@0.9.78 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.