registry  /  octocode-ai  /  3.8.0

octocode-ai@3.8.0

AI-powered development tool for the terminal

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Confirmed install-time global dependency installation creates unresolved supply-chain and global environment mutation risk, but no concrete malicious payload was found in inspected source. The binary CLI and shell tooling are user-invoked surfaces for an AI terminal tool.

Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm install lifecycle postinstall; later user-invoked `octo` CLI
Impact
Unconsented global package installation and execution of remote npm lifecycle code during install; no confirmed data theft, persistence, or agent control hijack in package source.
Mechanism
install-time global npm installs via execSync plus packaged CLI binary dispatch
Attack narrative
On npm install, the package runs script/postinstall.mjs, which attempts to install @nut-tree-fork/nut-js and playwright globally using npm. That fetches and executes third-party package install behavior outside the project dependency graph. This is risky and unconsented global mutation, but the inspected package files do not show credential theft, persistence, broad AI-agent control surface writes, or exfiltration.
Rationale
Source inspection confirms a risky lifecycle hook that globally installs additional npm packages, but the concrete block policy for AI-agent control hijack or malware is not met. Treat as warn-worthy install hook abuse/dangerous capability rather than publish-block maliciousness.
Evidence
package.jsonscript/postinstall.mjsscript/octo-shim.mjssrc/shell/shell.tsbin/octocode.exe
Network endpoints1
github.com/farhanic017/octocode

Decision evidence

public snapshot
AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
  • package.json postinstall runs script/postinstall.mjs on install.
  • script/postinstall.mjs executes `npm install -g @nut-tree-fork/nut-js` and `npm install -g playwright` without user opt-in.
  • Postinstall uses child_process execSync to mutate the global npm environment and fetch code at install time.
Evidence against
  • No inspected lifecycle code writes AI-agent config, shell startup, VCS hooks, or OS autostart files.
  • script/octo-shim.mjs only dispatches CLI arguments to a packaged binary when invoked.
  • The added shell helper source is CLI/runtime process management, not install-time persistence or exfiltration.
  • No credential harvesting or package-specific exfiltration endpoint was confirmed in inspected files.
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket
Supply chain
HighEntropyStringsUrlStrings
Manifest
CopyleftLicense
scanned 349 file(s), 2.36 MB of source, external domains: 127.0.0.1, api.digitalocean.com, api.github.com, api.githubcopilot.com, api.octocode.ai, api.openai.com, api.releases.hashicorp.com, app.octocode.ai, auth.openai.com, auth.x.ai, chatgpt.com, cloud.digitalocean.com, community.chocolatey.org, company.ghe.com, console.octocode.ai, dev.octocode.ai, docs.github.com, download-cdn.jetbrains.com, example.com, formulae.brew.sh, github.com, gitlab.com, inference.do-ai.run, json-schema.org, julialang.org, mcp.exa.ai, models.dev, octocode.ai, octocode.internal, opncd.ai, raw.githubusercontent.com, search.parallel.ai, social-cards.sst.dev, tauri.localhost, vercel.link, www.eclipse.org, www.googleapis.com

Source & flagged code

15 flagged · loading source
package.jsonView file
•scripts.postinstall = node script/postinstall.mjs
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
•scripts.postinstall = node script/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg
script/octo-shim.mjsView file
2L3: import { spawnSync } from "child_process" L4: import { existsSync } from "fs"
High
Child Process

Package source references child process execution.

script/octo-shim.mjsView on unpkg · L2
src/shell/shell.tsView file
15nu: { deny: true }, L16: powershell: { ps: true }, L17: pwsh: { ps: true },
High
Shell

Package source references shell execution.

src/shell/shell.tsView on unpkg · L15
script/time.tsView file
4const toDynamicallyImport = path.join(process.cwd(), process.argv[2]) L5: await import(toDynamicallyImport) L6: console.log(performance.now())
Medium
Dynamic Require

Package source references dynamic require/import behavior.

script/time.tsView on unpkg · L4
src/lsp/server.tsView file
1import type { ChildProcessWithoutNullStreams } from "child_process" L2: import path from "path" ... L24: const run = (cmd: string[], opts: Process.RunOptions = {}) => Process.run(cmd, { ...opts, nothrow: true }) L25: const output = (cmd: string[], opts: Process.RunOptions = {}) => Process.text(cmd, { ...opts, nothrow: true }) L26: ... L120: root: NearestRoot( L121: ["package-lock.json", "bun.lockb", "bun.lock", "pnpm-lock.yaml", "yarn.lock"], L122: ["deno.json", "deno.jsonc"], ... L133: env: { L134: ...process.env, L135: }, ... L188: log.info("downloading and building VS Code ESLint server")
High
Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/lsp/server.tsView on unpkg · L1
script/postinstall.mjsView file
17try { L18: execSync('npm install -g @nut-tree-fork/nut-js', { stdio: 'inherit' }); L19: console.log('✓ @nut-tree-fork/nut-js installed');
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

script/postinstall.mjsView on unpkg · L17
bin/octocode.exeView file
•path = bin/octocode.exe kind = native_binary sizeBytes = 143351808 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

bin/octocode.exeView on unpkg
src/cli/tui/tree-sitter-powershell-ryb2ffqs.wasmView file
•path = src/cli/tui/tree-sitter-powershell-ryb2ffqs.wasm kind = wasm_module sizeBytes = 983236 magicHex = [redacted]
Medium
Ships Wasm Module

Package ships WebAssembly modules.

src/cli/tui/tree-sitter-powershell-ryb2ffqs.wasmView on unpkg
octocode-ai-3.7.1.tgzView file
•path = octocode-ai-3.7.1.tgz kind = high_entropy_blob sizeBytes = 5106146 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

octocode-ai-3.7.1.tgzView on unpkg
•path = octocode-ai-3.7.1.tgz kind = compressed_blob sizeBytes = 5106146 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

octocode-ai-3.7.1.tgzView on unpkg
•path = octocode-ai-3.7.1.tgz kind = nested_archive_needs_inspection sizeBytes = 5106146 magicHex = [redacted]
Low
Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

octocode-ai-3.7.1.tgzView on unpkg
src/tool/shell.tsView file
•matchType = previous_version_dangerous_delta matchedPackage = octocode-ai@3.7.6 matchedIdentity = npm:b2N0b2NvZGUtYWk:3.7.6 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/tool/shell.tsView on unpkg
test/server/auth.test.tsView file
47patternName = generic_password severity = medium line = 47 matchedText = expect(S...al({
Medium
Secret Pattern

Hardcoded password in test/server/auth.test.ts

test/server/auth.test.tsView on unpkg · L47
test/server/httpapi-listen.test.tsView file
19patternName = generic_password severity = medium line = 19 matchedText = const au...t" }
Medium
Secret Pattern

Hardcoded password in test/server/httpapi-listen.test.ts

test/server/httpapi-listen.test.tsView on unpkg · L19

Findings

1 Critical6 High10 Medium6 Low
CriticalPrevious Version Dangerous Deltasrc/tool/shell.ts
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processscript/octo-shim.mjs
HighShellsrc/shell/shell.ts
HighSandbox Evasion Gated Capabilitysrc/lsp/server.ts
HighRuntime Package Installscript/postinstall.mjs
HighShips High Entropy Bloboctocode-ai-3.7.1.tgz
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirescript/time.ts
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarybin/octocode.exe
MediumShips Wasm Modulesrc/cli/tui/tree-sitter-powershell-ryb2ffqs.wasm
MediumShips Compressed Bloboctocode-ai-3.7.1.tgz
MediumStructural Risk Force Deep Review
MediumSecret Patterntest/server/auth.test.ts
MediumSecret Patterntest/server/httpapi-listen.test.ts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectionoctocode-ai-3.7.1.tgz
LowCopyleft License