registry / oh-my-codex / 0.21.26
oh-my-codex@0.21.26
⚠ Under reviewMulti-agent orchestration layer for OpenAI Codex CLI
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe inspected source shows a global-install-only native runtime download and CLI setup behavior, but does not establish an attack. I could not complete the required source coverage for a clean verdict, so this review remains unresolved.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
An npm global install triggers postinstall; local installs return without running its hydration path.
Impact
The inspected source does not establish hostile behavior, but the full required source set was not reviewed, so package safety remains unresolved.
Mechanism
The hook obtains the release manifest and downloads a native archive for runtime hydration. The setup API is reached through the CLI.
AI rationale
The inspected source shows a global-install-only native runtime download and CLI setup behavior, but does not establish an attack. I could not complete the required source coverage for a clean verdict, so this review remains unresolved.
Evidence
package.jsondist/scripts/postinstall.jsdist/cli/native-assets.jsdist/native-assets/policy.jsdist/cli/omx.jsdist/cli/setup.js
Decision evidence
public snapshotAI called this Manual Review at 76.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package postinstall hook calls its postinstall module.
- Postinstall skips local installs and hydrates the native runtime only for global installs.
- The runtime hydration code fetches a release manifest and downloads an archive; the manifest checks that each asset has a SHA-256 value.
- The setup API is part of the CLI and is not called by the inspected postinstall path.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
12 flaggedpackage.jsonView file
•scripts.postinstall = node -e "const fs=require('fs');const p='./dist/scripts/postinstall.js';if(fs.existsSync(p))import(p).then(m=>m.main?.()).catch(e=>console.warn('[omx] Postinstall skipped after a n...
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "const fs=require('fs');const p='./dist/scripts/postinstall.js';if(fs.existsSync(p))import(p).then(m=>m.main?.()).catch(e=>console.warn('[omx] Postinstall skipped after a n...
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/cli/__tests__/detached-leader-teardown.test.jsView file
340patternName = github_fine_grained
severity = critical
line = 340
Findings
3 Critical6 High6 Medium5 Low
CriticalRed Install Lifecycle Scriptpackage.json
CriticalCritical Secretdist/cli/__tests__/detached-leader-teardown.test.js
CriticalSecret Patterndist/cli/__tests__/detached-leader-teardown.test.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/cli/setup.js
HighRuntime Package Installdist/evals/astra-defaults/collector.js
HighSemantic Analysis Limiteddist/cli/api.js#virtual:normalized:round1
MediumDynamic Requiredist/cli/hooks.js
MediumNetwork
Affected versions and remediation
This report applies to oh-my-codex@0.21.26.
See all versions of oh-my-codex for other recorded verdicts.
- Review the evidence and your use of oh-my-codex@0.21.26 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.