registry / node-fsagent / 5.0.1783978336091

node-fsagent@5.0.1783978336091

eyJob3N0IjoiYmUxZTkxNDhhZDA0IiwidHMiOjE3ODM5NzgzMzYwOTEsInNpemUiOjM0NzIwNzYzfQ==

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

Source inspection confirms a nonfunctional package whose only substantive content is an opaque archive of AI-agent configuration and logs. This is a concrete sensitive-data distribution payload despite the absence of executable install hooks.

Static reason

No blocking static signals were detected.

Trigger

Package retrieval or direct reading of `data.bin`.

Impact

Unauthorized disclosure of Codex configuration, logs, cached plugin metadata, and related operational data.

Mechanism

Distribution of a captured AI-agent state archive.

Attack narrative

The otherwise empty package embeds a 34.7 MB gzip-compressed tarball of `root/.codex` state. Its contents include configuration, persistent SQLite logs, plugin caches, and temporary Codex files. Although no install-time code runs, publishing this unrelated captured state as an npm payload is a concrete data-disclosure mechanism: package distribution itself exposes the embedded material to downstream recipients.

AI rationale

Evidence

package.jsonindex.jsdata.bindata.bin!root/.codex/config.tomldata.bin!root/.codex/logs_2.sqlitedata.bin!root/.codex/logs_2.sqlite-wal

node-fsagent@5.0.1783978336091

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code