registry / cx-viewer / 1.0.4

cx-viewer@1.0.4

Codex Logger visualization management tool

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time behavior runs. Explicit cx-viewer commands modify shell/Codex integration and locally proxy Codex API traffic for its viewer/logging feature.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs `cxv -logger` or `cxv run`/CLI mode.

Impact

Can observe and mediate Codex sessions launched through cx-viewer; hooks are inert without its runtime port.

Mechanism

guarded Codex hook/config setup plus loopback API capture proxy

Rationale

Source confirms explicit-user agent integration and session capture, not malicious install-time behavior or an exfiltration chain. Flag as a warning because it modifies user shell/Codex control surfaces and handles sensitive session traffic.

Evidence

package.jsoncli.jslib/ensure-hooks.jsproxy.jsinterceptor.jslib/proxy-env.js~/.zshrc~/.bashrc~/.bash_profile~/.profile~/.codex/hooks.json~/.codex/config.toml~/.codex/auth.json

Network endpoints2

chatgpt.com/backend-api/codexapi.openai.com/v1

Decision evidence

public snapshot

AI called this Suspicious at 89.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`cli.js` explicitly installs shell hooks and edits Codex config during `cxv -logger`/`cxv run`.
`lib/ensure-hooks.js` writes `~/.codex/hooks.json` with a broad PermissionRequest matcher.
`cli.js` starts a loopback proxy that captures Codex/OpenAI traffic for local logging.

Evidence against

`package.json` has only `prepublishOnly`; no install-time lifecycle hook.
Hook commands are gated on `CXVIEWER_PORT`, set by cx-viewer runtime.
`proxy.js` binds its capture proxy to `127.0.0.1` and forwards to configured OpenAI/ChatGPT endpoints.
Reviewed code shows no credential exfiltration, remote payload download, or destructive action.
`--uninstall` removes the package's shell hooks and legacy Codex files.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 436 file(s), 15.7 MB of source, external domains: 127.0.0.1, api.example.com, api.github.com, api.openai.com, bellard.org, cdn.example.com, chatgpt.com, chevrotain.io, developers.openai.com, en.wikipedia.org, github.com, ipapi.co, ipinfo.io, ipwho.is, lexical.dev, reactjs.org, registry.npmjs.org, stuk.github.io, www.w3.org

Source & flagged code

11 flagged

findcx.jsView file

Lines 1-24javascript

1import { resolve, join } from 'node:path';

2import { fileURLToPath } from 'node:url';

3import { existsSync, realpathSync } from 'node:fs';

4import { homedir, tmpdir } from 'node:os';

5import { execSync } from 'node:child_process';

6import { threadId } from 'node:worker_threads';

High

Child Process

Package source references child process execution.

findcx.jsView on unpkg · L4

8const __dirname = fileURLToPath(new URL('.', import.meta.url));

10// ============ 配置区（第三方适配只需修改此处）============

12function resolveLogDir() {

13 const envDir = process.env.CXV_LOG_DIR;

14 if (typeof envDir === 'string' && envDir.trim()) {

15 const raw = envDir.trim();

16 // 允许通过 'tmp' 或 'temp' 关键字使用系统临时目录（常用于测试）

17 if (raw === 'tmp' || raw === 'temp') {

18 return join(tmpdir(), 'cx-viewer-test', `${process.pid}-${threadId}`);

19 }

20 const expanded = raw.startsWith('~/') ? join(homedir(), raw.slice(2)) : raw;

21 return resolve(expanded);

22 }

23 return join(homedir(), '.codex', 'cx-viewer');

24}

Lines 90-130javascript

90 if (existsSync(candidate)) {

91 return candidate;

92 }

93 }

94 }

95 // 兜底：返回全局目录下的默认路径，便于错误提示

96 return join(globalRoot || resolve(__dirname, '..'), PACKAGES[0], CLI_ENTRY);

97}

dist/assets/jszip.min-BxIXdRg4.jsView file

Lines 1-13javascript

1import{f as commonjsGlobal,g as getDefaultExportFromCjs}from"./vendor-antd-Bzi1WuBb.js";function _mergeNamespaces(n,m){for(var i=0;i<m.length;i++){const e=m[i];if("string"!=typeof e

dist/assets/livescript-Bw1Vw7Ae.jsView file

Lines 1-2javascript

1var tokenBase=function(stream,state){var next_rule=state.next||"start";state.next=state.next;var nr=Rules[next_rule];if(nr.splice){for(var i$=0;i$<nr.length;++i$){var r=

cli.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

3// 阻止 server.js 自动启动（必须在任何导入之前设置）

4process.env.CXV_WORKSPACE_MODE = '1';

6import { readFileSync, writeFileSync, existsSync, realpathSync, unlinkSync, mkdirSync } from 'node:fs';

7import { resolve } from 'node:path';

8import { fileURLToPath } from

server.jsView file

Lines 1-21javascript

1import { createServer } from 'node:http';

2import { createServer as createHttpsServer } from 'node:https';

3import { createConnection } from 'node:net';

4import { randomBytes } from 'node:crypto';

5import { readFileSync, writeFileSync, existsSync, watchFile, unwatchFile, statSync, readdirSync, renameSync, unlinkSync, rmSync, openSync, readSync, closeSync, realpathSync, mkdirSync, createReadStream, cpSync, copyFileSync, appendFileSync } from

lib/proxy-env.jsView file

Lines 1-21javascript

1import { EnvHttpProxyAgent, setGlobalDispatcher } from 'undici';

2import tls from 'node:tls';

3import { execFileSync } from 'node:child_process';

4import { existsSync, statSync, writeFileSync, appendFileSync, readFileSync } from 'node:fs';

6// 纯函数，从 env 中解析代理配置（可独立测试）

7export

lib/appserver-bridge.jsView file

Lines 2083-2123javascript

2083 `${shell} -ic 'declare -f ${BINARY_NAME} 2>/dev/null || type ${BINARY_NAME} 2>/dev/null'`,

2084 { encoding: 'utf-8', timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'] }

2085 );

2086 const proxyRe

build.jsView file

10console.log('🔨 正在执行 Vite 构建...'); L11: execSync('npx vite build', { cwd: __dirname, stdio: 'inherit' }); L12:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

build.jsView on unpkg · L10

scripts/mac-sign.shView file

•path = scripts/mac-sign.sh kind = build_helper sizeBytes = 1173 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/mac-sign.shView on unpkg

dist/favicon.icoView file

•path = dist/favicon.ico kind = high_entropy_blob sizeBytes = 19578 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/favicon.icoView on unpkg

Source & flagged code

11 flagged · loading source

findcx.jsView file

4import { homedir, tmpdir } from 'node:os'; L5: import { execSync } from 'node:child_process'; L6: import { threadId } from 'node:worker_threads';

High

Child Process

Package source references child process execution.

findcx.jsView on unpkg · L4

110if (existsSync('/bin/bash')) bypassCmds.push({ cmd: `type -P ${BINARY_NAME}`, shell: '/bin/bash' }); L111: const fallbackCmds = [`which ${BINARY_NAME}`, `command -v ${BINARY_NAME}`].map(c => ({ cmd: c, shell: true })); L112: for (const { cmd, shell } of [...bypassCmds, ...fallbackCmds]) {

High

Shell

Package source references shell execution.

findcx.jsView on unpkg · L110

dist/assets/jszip.min-BxIXdRg4.jsView file

11https://github.[redacted] L12: */var jszip_minExports=(hasRequiredJszip_min||(hasRequiredJszip_min=1,jszip_min$2.exports=function s(a,o,h){function u(r,e2){if(!o[r]){if(!a[r]){if(!e2&&commonjsRequire)return comm...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/jszip.min-BxIXdRg4.jsView on unpkg · L11

dist/assets/livescript-Bw1Vw7Ae.jsView file

1var tokenBase=function(stream,state){var next_rule=state.next||"start";state.next=state.next;var nr=Rules[next_rule];if(nr.splice){for(var i$=0;i$<nr.length;++i$){var r=nr[i$];if(r...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/livescript-Bw1Vw7Ae.jsView on unpkg · L1

cli.jsView file

3// 阻止 server.js 自动启动（必须在任何导入之前设置） L4: process.env.CXV_WORKSPACE_MODE = '1'; L5: ... L9: import { homedir } from 'node:os'; L10: import { spawn } from 'node:child_process'; L11: import { t } from './i18n.js'; ... L15: L16: const __dirname = fileURLToPath(new URL('.', import.meta.url)); L17: ... L29: const shell = process.env.SHELL || ''; L30: if (shell.includes('zsh')) return resolve(homedir(), '.zshrc'); L31: if (shell.includes('bash')) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

cli.jsView on unpkg · L3

server.jsView file

1Manifest entrypoint (manifest.main) carries capability families absent from dist/build output: environment+network, execution+network L1: import { createServer } from 'node:http'; L2: import { createServer as createHttpsServer } from 'node:https'; ... L8: import { homedir, platform, networkInterfaces } from 'node:os'; L9: import { execFile, exec, spawn } from 'node:child_process'; L10: import { promisify } from 'node:util'; ... L20: const child = spawn(cmd, args, { ...options, stdio: ['pipe', 'pipe', 'pipe'] }); L21: let stdout = ''; L22: let stderr = ''; ... L32: } L33: child.stdin.write(input); L34: child.stdin.end(); ... L61: let prefs = {};

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

server.jsView on unpkg · L1

lib/proxy-env.jsView file

1import { EnvHttpProxyAgent, setGlobalDispatcher } from 'undici'; L2: import tls from 'node:tls'; L3: import { execFileSync } from 'node:child_process'; L4: import { existsSync, statSync, writeFileSync, appendFileSync, readFileSync } from 'node:fs'; ... L6: // 纯函数，从 env 中解析代理配置（可独立测试） L7: export function resolveProxyConfig(env = process.env) { L8: const allProxy = env.all_proxy || env.ALL_PROXY;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/proxy-env.jsView on unpkg · L1

lib/appserver-bridge.jsView file

2103} L2104: _appServerProcess = spawn(command, appServerArgs, { L2105: cwd, ... L2109: L2110: _appServerProcess.stdout.on('data', (data) => { L2111: if (process.env.CXV_DEBUG) process.stderr.write(`[app-server] ${data}`); L2112: }); ... L2117: // 3. 等待就绪 L2118: await waitForReady(`http://127.0.0.1:${appServerPort}/readyz`); L2119:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

lib/appserver-bridge.jsView on unpkg · L2103

build.jsView file

10console.log('🔨 正在执行 Vite 构建...'); L11: execSync('npx vite build', { cwd: __dirname, stdio: 'inherit' }); L12:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

build.jsView on unpkg · L10

scripts/mac-sign.shView file

•path = scripts/mac-sign.sh kind = build_helper sizeBytes = 1173 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/mac-sign.shView on unpkg

dist/favicon.icoView file

•path = dist/favicon.ico kind = high_entropy_blob sizeBytes = 19578 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/favicon.icoView on unpkg

Findings

7 High7 Medium8 Low

HighChild Processfindcx.js

HighShellfindcx.js

HighEntrypoint Build Divergenceserver.js

HighSame File Env Network Executionlib/proxy-env.js

HighCommand Output Exfiltrationlib/appserver-bridge.js

HighRuntime Package Installbuild.js

HighShips High Entropy Blobdist/favicon.ico

MediumDynamic Requiredist/assets/livescript-Bw1Vw7Ae.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencecli.js

MediumProtestware

MediumShips Build Helperscripts/mac-sign.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/assets/jszip.min-BxIXdRg4.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

11 flagged

findcx.jsView file

Lines 1-24javascript

1import { resolve, join } from 'node:path';

2import { fileURLToPath } from 'node:url';

3import { existsSync, realpathSync } from 'node:fs';

4import { homedir, tmpdir } from 'node:os';

5import { execSync } from 'node:child_process';

6import { threadId } from 'node:worker_threads';

High

Child Process

Package source references child process execution.

findcx.jsView on unpkg · L4

8const __dirname = fileURLToPath(new URL('.', import.meta.url));

10// ============ 配置区（第三方适配只需修改此处）============

12function resolveLogDir() {

13 const envDir = process.env.CXV_LOG_DIR;

14 if (typeof envDir === 'string' && envDir.trim()) {

15 const raw = envDir.trim();

16 // 允许通过 'tmp' 或 'temp' 关键字使用系统临时目录（常用于测试）

17 if (raw === 'tmp' || raw === 'temp') {

18 return join(tmpdir(), 'cx-viewer-test', `${process.pid}-${threadId}`);

19 }

20 const expanded = raw.startsWith('~/') ? join(homedir(), raw.slice(2)) : raw;

21 return resolve(expanded);

22 }

23 return join(homedir(), '.codex', 'cx-viewer');

24}

Lines 90-130javascript

90 if (existsSync(candidate)) {

91 return candidate;

92 }

93 }

94 }

95 // 兜底：返回全局目录下的默认路径，便于错误提示

96 return join(globalRoot || resolve(__dirname, '..'), PACKAGES[0], CLI_ENTRY);

97}

dist/assets/jszip.min-BxIXdRg4.jsView file

Lines 1-13javascript

1import{f as commonjsGlobal,g as getDefaultExportFromCjs}from"./vendor-antd-Bzi1WuBb.js";function _mergeNamespaces(n,m){for(var i=0;i<m.length;i++){const e=m[i];if("string"!=typeof e

dist/assets/livescript-Bw1Vw7Ae.jsView file

Lines 1-2javascript

1var tokenBase=function(stream,state){var next_rule=state.next||"start";state.next=state.next;var nr=Rules[next_rule];if(nr.splice){for(var i$=0;i$<nr.length;++i$){var r=

cli.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

3// 阻止 server.js 自动启动（必须在任何导入之前设置）

4process.env.CXV_WORKSPACE_MODE = '1';

6import { readFileSync, writeFileSync, existsSync, realpathSync, unlinkSync, mkdirSync } from 'node:fs';

7import { resolve } from 'node:path';

8import { fileURLToPath } from

server.jsView file

Lines 1-21javascript

1import { createServer } from 'node:http';

2import { createServer as createHttpsServer } from 'node:https';

3import { createConnection } from 'node:net';

4import { randomBytes } from 'node:crypto';

lib/proxy-env.jsView file

Lines 1-21javascript

1import { EnvHttpProxyAgent, setGlobalDispatcher } from 'undici';

2import tls from 'node:tls';

3import { execFileSync } from 'node:child_process';

4import { existsSync, statSync, writeFileSync, appendFileSync, readFileSync } from 'node:fs';

6// 纯函数，从 env 中解析代理配置（可独立测试）

7export

lib/appserver-bridge.jsView file

Lines 2083-2123javascript

2083 `${shell} -ic 'declare -f ${BINARY_NAME} 2>/dev/null || type ${BINARY_NAME} 2>/dev/null'`,

2084 { encoding: 'utf-8', timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'] }

2085 );

2086 const proxyRe

build.jsView file

10console.log('🔨 正在执行 Vite 构建...'); L11: execSync('npx vite build', { cwd: __dirname, stdio: 'inherit' }); L12:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

build.jsView on unpkg · L10

scripts/mac-sign.shView file

•path = scripts/mac-sign.sh kind = build_helper sizeBytes = 1173 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/mac-sign.shView on unpkg

dist/favicon.icoView file

•path = dist/favicon.ico kind = high_entropy_blob sizeBytes = 19578 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/favicon.icoView on unpkg