devcodex@1.20.2: Malicious npm security report (Block)

Loading npm security reports…

devcodex@1.20.2: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

19 flagged

Lines 1-30json

2 "name": "devcodex",

3 "version": "1.20.2",

4 "description": "DevCodex — cross-host AI coding engineering harness for Codex, Claude Code, GitHub Copilot, Gemini CLI, Grok, and Cursor",

5 "main": "index.js",

6 "bin": {

7 "devcodex": "index.js"

8 },

9 "scripts": {

10 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L10

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L10

11 "prepack": "node scripts/prepack-control-content.js",

12 "postpack": "node scripts/postpack-control-content.js",

13 "validate": "node scripts/validate-installed-package.js",

14 "global-adapters:apply": "node index.js global-adapters apply",

15 "global-adapters:apply:dry-run": "node index.js global-adapters apply --dry-run",

16 "global-adapters:remove": "node index.js global-adapters remove --apply",

17 "global-adapters:remove:dry-run": "node index.js global-adapters remove --dry-run"

18 },

19 "keywords": [

20 "ai-coding",

21 "coding-harness",

22 "workflow-runtime",

23 "developer-tools",

24 "coding-agent",

25 "local-first",

26 "github-copilot",

27 "claude-code",

28 "codex",

29 "gemini-cli",

30 "grok",

index.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

2/**

3 * DevCodex CLI – npx devcodex <command>

4 * Commands and aliases are defined by the shared CLI command registry.

5 */

7'use strict'

9const fs = require('fs')

scripts/test-task-admission-authority.jsView file

Lines 46-86javascript

46 validateProjectTargetLease

47} = require('../mcp/task-admission-authority.cjs')

48const {

49 taskOperationRecordDigest,

50 taskOperationTargetSetDigest,

51 taskOperationTerminalSnapshot

scripts/lib/devcodex-readiness.jsView file

Lines 1-21javascript

1'use strict'

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/lib/devcodex-readiness.jsView on unpkg · L1

3const crypto = require('crypto')

4const fs = require

scripts/lib/cli-maintenance-commands.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. const current = fs.readfilesync(item.dest, 'utf8') fs.writefilesync(item.dest, updateprofiletierdeclaration(current, tier), 'utf8') continue } if (item.action === 'backup-and-generate') { const bak = `${item.dest}.bak.${backupid}` fs.copyfilesync(item.dest, bak) backedup++ } fs.writefilesync(item.dest, generators[item.file](), 'utf-8') } } log() const plannedtierupdates = actions.filter(item => item.action === 'update-tier').length log(` ${options.dryrun ? 'planned generate' : 'generated'}: ${generated} skipped: ${skipped} tier updates: ${plannedtierupdates} backed up: ${

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/lib/cli-maintenance-commands.jsView on unpkg

hooks/_runtime/lifecycle-turn-liveness.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

hooks/_runtime/lifecycle-turn-liveness.cjs#virtual:normalized:round1View on unpkg

grok/plugins/devcodex-workspace/hooks/devcodex-workspace.cjsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = grok/plugins/devcodex-workspace/hooks/devcodex-workspace.cjs matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

grok/plugins/devcodex-workspace/hooks/devcodex-workspace.cjsView on unpkg

scripts/lib/node-runtime-readiness.jsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = scripts/lib/node-runtime-readiness.js matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/lib/node-runtime-readiness.jsView on unpkg

scripts/lib/real-codex-host-probe.jsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = scripts/lib/real-codex-host-probe.js matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/lib/real-codex-host-probe.jsView on unpkg

scripts/test-derived-state-lock-concurrency.jsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = scripts/test-derived-state-lock-concurrency.js matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-derived-state-lock-concurrency.jsView on unpkg

scripts/test-security-audit.jsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = scripts/test-security-audit.js matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-security-audit.jsView on unpkg

scripts/test-validation-wave-executor.jsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = scripts/test-validation-wave-executor.js matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-validation-wave-executor.jsView on unpkg

grok/plugins/devcodex-workspace/mcp/workspace-bridge.cjsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = grok/plugins/devcodex-workspace/mcp/workspace-bridge.cjs matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

grok/plugins/devcodex-workspace/mcp/workspace-bridge.cjsView on unpkg

scripts/instruction-fallback-check.jsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = scripts/instruction-fallback-check.js matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/instruction-fallback-check.jsView on unpkg

scripts/test-host-capability-routing.jsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = scripts/test-host-capability-routing.js matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-host-capability-routing.jsView on unpkg

scripts/test-host-skill-route-capability.jsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = scripts/test-host-sk[redacted] matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-host-skill-route-capability.jsView on unpkg

scripts/test-skill-route-stage-b.jsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = scripts/test-sk[redacted] matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-skill-route-stage-b.jsView on unpkg

hooks/_runtime/context-source-observation.cjsView file

•matchType = normalized_sha256 matchedPackage = devcodex@1.20.1 matchedPath = hooks/_runtime/context-source-observation.cjs matchedIdentity = npm:ZGV2Y29kZXg:1.20.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/_runtime/context-source-observation.cjsView on unpkg

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

index.jsView file

8L9: const fs = require('fs') L10: const os = require('os')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L8

scripts/test-task-admission-authority.jsView file

66} L67: const KEEP_TEST_ARTIFACTS = process.env.DEVCODEX_KEEP_TEST_ARTIFACTS === '1' L68: const TEST_RUNTIME = { ... L80: fs.mkdirSync(path.join(activeRoot, 'profile'), { recursive: true }) L81: fs.writeFileSync(path.join(physicalRoot, 'package.json'), '{}\n') L82: return { physicalRoot, activeRoot, project: name } ... L629: assert.strictEqual(recovery.status, 'fresh') L630: const legacyState = JSON.parse(JSON.stringify(recovery.state)) L631: delete legacyState.taskRecoveryCommitFence ... L729: const templateSource = fs.readFileSync(resolveControlAsset( L730: path.resolve(__dirname, '..'), 'prompts/requirement-session.prompt.md' L731: ), 'utf8')

Low

Weak Crypto

Package source references weak cryptographic algorithms.

scripts/test-task-admission-authority.jsView on unpkg · L66

scripts/lib/devcodex-readiness.jsView file

1Install-time code directly mutates a foreign AI-agent control surface: L62: const env = options.env || process.env L63: const sessionId = String(env.CODEX_THREAD_ID || '').trim() L64: if (!sessionId) return null ... L179: } L180: fsImpl.mkdirSync(directory, { recursive: true }) L181: const unsafeAfter = unsafePathComponent(sharedRoot, file, fsImpl) ... L198: } L199: fsImpl.writeFileSync(temporary, `${JSON.stringify(payload, null, 2)}\n`, { encoding: 'utf8', flag: 'wx', mode: 0o600 }) L200: fsImpl.renameSync(temporary, file) ... L334: facts.globalLifecycleFilesPresent.status === 'BLOCK' || L335: facts.codexAdapterContractReady.status === 'BLOCK' || L336: facts.managedConfigDrift.status === 'BLOCK') { Write operation from scripts/lib/devcodex-readiness.js: L62: const env = options.env || pro

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/lib/devcodex-readiness.jsView on unpkg · L1

scripts/lib/cli-maintenance-commands.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/lib/cli-maintenance-commands.jsView on unpkg

hooks/_runtime/lifecycle-turn-liveness.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

hooks/_runtime/lifecycle-turn-liveness.cjs#virtual:normalized:round1View on unpkg

grok/plugins/devcodex-workspace/hooks/devcodex-workspace.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

grok/plugins/devcodex-workspace/hooks/devcodex-workspace.cjsView on unpkg

scripts/lib/node-runtime-readiness.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/lib/node-runtime-readiness.jsView on unpkg

scripts/lib/real-codex-host-probe.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/lib/real-codex-host-probe.jsView on unpkg

scripts/test-derived-state-lock-concurrency.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-derived-state-lock-concurrency.jsView on unpkg

scripts/test-security-audit.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-security-audit.jsView on unpkg

scripts/test-validation-wave-executor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-validation-wave-executor.jsView on unpkg

grok/plugins/devcodex-workspace/mcp/workspace-bridge.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

grok/plugins/devcodex-workspace/mcp/workspace-bridge.cjsView on unpkg

scripts/instruction-fallback-check.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/instruction-fallback-check.jsView on unpkg

scripts/test-host-capability-routing.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-host-capability-routing.jsView on unpkg

scripts/test-host-skill-route-capability.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-host-skill-route-capability.jsView on unpkg

scripts/test-skill-route-stage-b.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-skill-route-stage-b.jsView on unpkg

hooks/_runtime/context-source-observation.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/_runtime/context-source-observation.cjsView on unpkg

Source & flagged code

19 flagged

package.jsonView file

Lines 1-30json

2 "name": "devcodex",

3 "version": "1.20.2",

4 "description": "DevCodex — cross-host AI coding engineering harness for Codex, Claude Code, GitHub Copilot, Gemini CLI, Grok, and Cursor",

5 "main": "index.js",

6 "bin": {

7 "devcodex": "index.js"

8 },

9 "scripts": {

10 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L10

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L10

11 "prepack": "node scripts/prepack-control-content.js",

12 "postpack": "node scripts/postpack-control-content.js",

13 "validate": "node scripts/validate-installed-package.js",

14 "global-adapters:apply": "node index.js global-adapters apply",

15 "global-adapters:apply:dry-run": "node index.js global-adapters apply --dry-run",

16 "global-adapters:remove": "node index.js global-adapters remove --apply",

17 "global-adapters:remove:dry-run": "node index.js global-adapters remove --dry-run"

18 },

19 "keywords": [

20 "ai-coding",

21 "coding-harness",

22 "workflow-runtime",

23 "developer-tools",

24 "coding-agent",

25 "local-first",

26 "github-copilot",

27 "claude-code",

28 "codex",

29 "gemini-cli",

30 "grok",

index.jsView file

Lines 1-28javascript

1#!/usr/bin/env node

2/**

3 * DevCodex CLI – npx devcodex <command>

4 * Commands and aliases are defined by the shared CLI command registry.

5 */

7'use strict'

9const fs = require('fs')

scripts/test-task-admission-authority.jsView file

Lines 46-86javascript

46 validateProjectTargetLease

47} = require('../mcp/task-admission-authority.cjs')

48const {

49 taskOperationRecordDigest,

50 taskOperationTargetSetDigest,

51 taskOperationTerminalSnapshot

scripts/lib/devcodex-readiness.jsView file

Lines 1-21javascript

1'use strict'

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/lib/devcodex-readiness.jsView on unpkg · L1

3const crypto = require('crypto')

4const fs = require

scripts/lib/cli-maintenance-commands.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/lib/cli-maintenance-commands.jsView on unpkg

hooks/_runtime/lifecycle-turn-liveness.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

hooks/_runtime/lifecycle-turn-liveness.cjs#virtual:normalized:round1View on unpkg

grok/plugins/devcodex-workspace/hooks/devcodex-workspace.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

grok/plugins/devcodex-workspace/hooks/devcodex-workspace.cjsView on unpkg

scripts/lib/node-runtime-readiness.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/lib/node-runtime-readiness.jsView on unpkg

scripts/lib/real-codex-host-probe.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/lib/real-codex-host-probe.jsView on unpkg

scripts/test-derived-state-lock-concurrency.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-derived-state-lock-concurrency.jsView on unpkg

scripts/test-security-audit.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-security-audit.jsView on unpkg

scripts/test-validation-wave-executor.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-validation-wave-executor.jsView on unpkg

grok/plugins/devcodex-workspace/mcp/workspace-bridge.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

grok/plugins/devcodex-workspace/mcp/workspace-bridge.cjsView on unpkg

scripts/instruction-fallback-check.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/instruction-fallback-check.jsView on unpkg

scripts/test-host-capability-routing.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-host-capability-routing.jsView on unpkg

scripts/test-host-skill-route-capability.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-host-skill-route-capability.jsView on unpkg

scripts/test-skill-route-stage-b.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/test-skill-route-stage-b.jsView on unpkg

hooks/_runtime/context-source-observation.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

hooks/_runtime/context-source-observation.cjsView on unpkg

devcodex@1.20.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code