registry / oh-my-codex / 0.21.36
oh-my-codex@0.21.36
⚠ Under reviewMulti-agent orchestration layer for OpenAI Codex CLI
AI Security Review
scanned 11d ago · by lpm-firewall-aiInspected lifecycle code limits postinstall activity to global installs and hydrates a native runtime with archive integrity checks. The package’s broader runtime and agent setup behavior was not resolved, so the evidence does not support a clean or harmful verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Package installation; broader runtime activation was not fully traced.
Impact
No concrete harmful effect was confirmed, but the available inspection does not resolve the package’s full behavior.
Mechanism
The inspected postinstall path is limited to global installs and invokes native runtime hydration; the wider setup and runtime paths were not completely assessed.
AI rationale
Inspected lifecycle code limits postinstall activity to global installs and hydrates a native runtime with archive integrity checks. The package’s broader runtime and agent setup behavior was not resolved, so the evidence does not support a clean or harmful verdict.
Evidence
package.jsondist/scripts/postinstall.jsdist/cli/native-assets.jsdist/cli/setup.js
Decision evidence
public snapshotAI called this Manual Review at 64.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest postinstall imports and calls the package’s postinstall handler.
- The handler returns without action for local installs; global installs can hydrate the native runtime.
- Native runtime downloads are checked against the declared archive size and SHA-256 digest.
- The inspected setup excerpt writes a destination file, but does not establish the full setup consent and configuration flow.
Evidence against
- The inspected sources did not establish credential collection, unrelated data transfer, or unconsented broad agent configuration changes.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
12 flaggedpackage.jsonView file
•scripts.postinstall = node -e "const fs=require('fs');const p='./dist/scripts/postinstall.js';if(fs.existsSync(p))import(p).then(m=>m.main?.()).catch(e=>console.warn('[omx] Postinstall skipped after a n...
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "const fs=require('fs');const p='./dist/scripts/postinstall.js';if(fs.existsSync(p))import(p).then(m=>m.main?.()).catch(e=>console.warn('[omx] Postinstall skipped after a n...
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/cli/__tests__/detached-leader-teardown.test.jsView file
340patternName = github_fine_grained
severity = critical
line = 340
Findings
4 Critical5 High6 Medium5 Low
CriticalRed Install Lifecycle Scriptpackage.json
CriticalCritical Secretdist/cli/__tests__/detached-leader-teardown.test.js
CriticalPrevious Version Dangerous Deltadist/scripts/codex-native-hook.js
CriticalSecret Patterndist/cli/__tests__/detached-leader-teardown.test.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighRuntime Package Installdist/evals/astra-defaults/collector.js
HighSemantic Analysis Limiteddist/cli/api.js#virtual:normalized:round1
MediumDynamic Requiredist/cli/hooks.js
MediumNetwork
Affected versions and remediation
This report applies to oh-my-codex@0.21.36.
See all versions of oh-my-codex for other recorded verdicts.
- Review the evidence and your use of oh-my-codex@0.21.36 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.