registry / oh-my-codex / 0.21.44
oh-my-codex@0.21.44
Multi-agent orchestration layer for OpenAI Codex CLI
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe lifecycle scripts have package-related purposes: preparation builds the distribution, while postinstall hydrates the package’s native runtime only for global installs. The flagged credential reference belongs to an evaluation collector, and the inspected source does not show it being used by installation or default import behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
prepare runs during package preparation; postinstall runs during installation but exits without action for local installs, and hydrates the runtime for global installs.
Impact
Expected build and native runtime setup behavior; no install-time collection of host, user, project, or credential data was identified.
Mechanism
The prepare script may install project dependencies with npm scripts disabled and build the package. The global postinstall downloads the package’s native runtime from its GitHub release and caches it.
AI rationale
The lifecycle scripts have package-related purposes: preparation builds the distribution, while postinstall hydrates the package’s native runtime only for global installs. The flagged credential reference belongs to an evaluation collector, and the inspected source does not show it being used by installation or default import behavior.
Evidence
package.jsonsrc/scripts/prepare-build.jsdist/scripts/postinstall.jsdist/cli/native-assets.js
Network endpoints2
github.comapi.layofflabs.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The prepare hook builds the package; if compiled output is missing, it bootstraps project dependencies with scripts disabled, then runs the build.
- The postinstall hook does nothing for local installs and hydrates the native runtime only for global installs.
- The runtime download URL is derived from the package repository’s GitHub release, consistent with fetching this package’s own native asset.
- The OpenAI key reference is in an evaluation collector that runs Codex for evaluation records, not in the install hooks.
Evidence against
- The global-install postinstall performs network access and writes a native runtime binary to a cache location.
- The evaluation collector can configure Codex to use OPENAI_API_KEY with the layofflabs provider when evaluating internal model names.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
23 flaggedpackage.jsonView file
•scripts.postinstall = node -e "const fs=require('fs');const p='./dist/scripts/postinstall.js';if(fs.existsSync(p))import(p).then(m=>m.main?.()).catch(e=>console.warn('[omx] Postinstall skipped after a n...
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "const fs=require('fs');const p='./dist/scripts/postinstall.js';if(fs.existsSync(p))import(p).then(m=>m.main?.()).catch(e=>console.warn('[omx] Postinstall skipped after a n...
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/cli/__tests__/detached-leader-teardown.test.jsView file
340patternName = github_fine_grained
severity = critical
line = 340
Findings
3 Critical17 High6 Medium5 Low
CriticalRed Install Lifecycle Scriptpackage.json
CriticalCritical Secretdist/cli/__tests__/detached-leader-teardown.test.js
CriticalSecret Patterndist/cli/__tests__/detached-leader-teardown.test.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighRuntime Package Installdist/evals/astra-defaults/collector.js
HighSemantic Analysis Limiteddist/cli/api.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/ralplan/documented-leader-preflight.js
HighKnown Malware Source Similaritydist/scripts/smoke-packed-install.js
Affected versions and remediation
This report applies to oh-my-codex@0.21.44.
See all versions of oh-my-codex for other recorded verdicts.
- Review the evidence and your use of oh-my-codex@0.21.44 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.