registry / oh-my-codex / 0.21.37
oh-my-codex@0.21.37
Multi-agent orchestration layer for OpenAI Codex CLI
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe install hook does not run its setup for local installs, and global installs hydrate the package's own native runtime from its versioned GitHub release path. The credential-using eval collector is an explicit evaluation feature, not an automatic install or import action.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
npm postinstall; runtime hydration is gated to global installs.
Impact
No automatic collection or transmission of host, project, or credential data was found in the reviewed install path.
Mechanism
The hook downloads the versioned native runtime from the package's GitHub release path and records the installed version. The eval collector runs only when invoked for evaluation work.
AI rationale
The install hook does not run its setup for local installs, and global installs hydrate the package's own native runtime from its versioned GitHub release path. The credential-using eval collector is an explicit evaluation feature, not an automatic install or import action.
Evidence
package.jsondist/scripts/postinstall.jsdist/cli/native-assets.jssrc/scripts/prepare-build.jsdist/evals/astra-defaults/collector.js
Network endpoints1
github.com
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook calls the package's postinstall module.
- The postinstall module exits without action for local installs; on global installs it hydrates the native runtime and updates an install-version stamp.
- Native release downloads default to the package's GitHub repository and versioned release path.
- The eval collector is an exported function; its Codex invocation is part of evaluation work, not package installation.
Evidence against
- The prepare script bootstraps dependencies with --ignore-scripts before running the build.
- The eval collector can use OPENAI_API_KEY and clone the project's GitHub repository when its evaluation collection is invoked.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
12 flaggedpackage.jsonView file
•scripts.postinstall = node -e "const fs=require('fs');const p='./dist/scripts/postinstall.js';if(fs.existsSync(p))import(p).then(m=>m.main?.()).catch(e=>console.warn('[omx] Postinstall skipped after a n...
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "const fs=require('fs');const p='./dist/scripts/postinstall.js';if(fs.existsSync(p))import(p).then(m=>m.main?.()).catch(e=>console.warn('[omx] Postinstall skipped after a n...
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/cli/__tests__/detached-leader-teardown.test.jsView file
340patternName = github_fine_grained
severity = critical
line = 340
Findings
4 Critical5 High6 Medium5 Low
CriticalRed Install Lifecycle Scriptpackage.json
CriticalCritical Secretdist/cli/__tests__/detached-leader-teardown.test.js
CriticalPrevious Version Dangerous Deltadist/scripts/codex-native-hook.js
CriticalSecret Patterndist/cli/__tests__/detached-leader-teardown.test.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighRuntime Package Installdist/evals/astra-defaults/collector.js
HighSemantic Analysis Limiteddist/cli/api.js#virtual:normalized:round1
MediumDynamic Requiredist/cli/hooks.js
MediumNetwork
Affected versions and remediation
This report applies to oh-my-codex@0.21.37.
See all versions of oh-my-codex for other recorded verdicts.
- Review the evidence and your use of oh-my-codex@0.21.37 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.