AI called this Malicious at 96.0% confidence as Malware with low false-positive risk.
Evidence for block
- `data.bin` is a 34.7 MB gzip whose decompressed content is a GNU tar archive.
- The archive contains a captured `root/.codex/` tree, including `config.toml`, SQLite logs/WAL, plugin cache, and temporary state.
- `package.json` has no declared entrypoint or lifecycle scripts; `index.js` is empty, so the package’s substantive payload is the opaque archive.
- The payload is unrelated to the declared `node-fsagent` identity and distributes AI-agent configuration and operational logs.
Evidence against
- No `preinstall`, `install`, `postinstall`, or other lifecycle hook is declared in `package.json`.
- `index.js` is empty; no package source executes shell commands, network requests, or archive extraction at import time.
- No package-owned runtime network endpoint or install-time persistence behavior was found.
Behavioral surface
SourceNo risky source behavior triggered.
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 0 B of source