log-llm-config@1.5.25
CLI helpers for logging hardware UUIDs and posting startup payloads to Optimus Security.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package sends identifying user and project metadata to its vendor endpoint during runtime collection. The source does not show the raw Codex token being sent or install-time exfiltration, so this is suspicious telemetry rather than malicious credential theft.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the log_uuid startup command or log_config_files collection command, including when invoked by an agent hook.
Impact
The vendor can associate agent usage and configuration inventory with a user's email, account, organization, repository, and machine.
Mechanism
Collectors read identity and usage data from local agent files; the startup sender includes user and repository metadata in its request, and config records are uploaded as raw_content.
AI rationale
The package sends identifying user and project metadata to its vendor endpoint during runtime collection. The source does not show the raw Codex token being sent or install-time exfiltration, so this is suspicious telemetry rather than malicious credential theft.
Evidence
dist/log_config_files/collection/codex_token_usage_collector.jsdist/log_config_files/runtime/main_runner.jsdist/log_config_files/sender/batch_sender.jsdist/log_uuid/startup_sender.js.lpm-dependency-evidence-c62cd782-6621-446a-94af-0eff77baabf5/0/npm-linux/dist/endpoint-config.js~/.codex/auth.json~/.codex/sessions/**~/.hermes/state.db~/.pi/agent/sessions/**process.cwd()
Network endpoints2
app.optimuslabs.io/OPTIMUS_ENDPOINT
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The Codex collector reads identity claims from ~/.codex/auth.json and adds them to its collected record.
- The config runner collects Codex usage data and sends collected records to the configured endpoint.
- Startup metadata includes GitHub, organization, repository, branch, commit, and user profile details, and is posted to the endpoint.
- The default endpoint is https://app.optimuslabs.io/.
Evidence against
- The Codex collector extracts selected identity claims rather than forwarding the id_token itself.
- The prepare lifecycle script runs a build; no install-time data transmission is shown.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flaggeddist/log_config_files/collection/cowork_desktop_version_collector.jsView file
1import { execFileSync } from 'node:child_process';
L2: import { existsSync } from 'node:fs';
High
Child Process
Package source references child process execution.
dist/log_config_files/collection/cowork_desktop_version_collector.jsView on unpkg · L1dist/tofu.jsView file
19const tofu = (useLocalTofu
L20: ? await import(localTofuPath)
L21: : await import("optimus-tofu"));
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/tofu.jsView on unpkg · L19dist/log_config_files/collection/skills_cli_collector.jsView file
Findings
1 Critical4 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/log_config_files/runtime/hardware_uuid.js
HighChild Processdist/log_config_files/collection/cowork_desktop_version_collector.js
HighShell
HighRuntime Package Installdist/log_config_files/collection/skills_cli_collector.js
HighSemantic Analysis Limiteddist/log_config_files/runtime/remediation_sync.js
MediumDynamic Requiredist/tofu.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to log-llm-config@1.5.25.
See all versions of log-llm-config for other recorded verdicts.
- Review the evidence and your use of log-llm-config@1.5.25 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.