Loading npm security reports…

tokmax@0.9.13: Clean npm security report (Allow) | LPM Firewall

registry / tokmax / 0.9.13

tokmax@0.9.13

Scan your local Codex + Claude Code logs, aggregate per-model token usage, and publish the API-equivalent $ to the tokmax leaderboard (tokmax.dev). Prices: LiteLLM, counting: ccusage. Aggregates only — never your prompts, files, or keys.

AI Security Review

scanned 18d ago · by lpm-firewall-ai

No confirmed malicious attack surface; observed network, local-file reads, credential storage, browser opening, and scheduler writes are aligned with a token-usage leaderboard CLI. Behavior is activated by user-running the CLI, login, publish, delete, or daily commands, not package installation.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs tokmax CLI commands such as login, publish, delete, or daily on

Impact

Publishes aggregate token usage and optional subscription dollar value; may store tokmax tokens and scheduled jobs when requested

Mechanism

user-invoked aggregate scanner and publisher

Rationale

Static inspection shows a user-invoked CLI that scans local AI-tool usage logs, computes aggregate costs, and publishes aggregates to package-aligned endpoints. Suspicious primitives such as network calls, token files, child_process, and scheduled jobs are disclosed and tied to login/browser opening or explicit daily update functionality, with no install-time execution, exfiltration of prompts/keys, persistence abuse, or AI-agent control-surface mutation found.

Evidence

package.jsonbin/tokmax.mjssrc/adapters/codex.mjssrc/adapters/claude-code.mjssrc/publish.mjssrc/auth.mjssrc/secrets.mjssrc/daily.mjssrc/plan.mjssrc/util.mjs~/.codex/sessions/**/*.jsonl~/.codex/archived_sessions/*.jsonl~/.claude*/projects/**/*.jsonl

Source & flagged code

2 flagged

bin/tokmax.mjsView file

Lines 1-39javascript

1#!/usr/bin/env node

2//

3// tokmax — scan local Codex + Claude Code logs, aggregate per-model token

4// usage, preview the API-equivalent $, and publish the aggregate to the

5// tokmax leaderboard (tokmax.dev).

6//

7// Ways to run:

8// npx tokmax → interactive onboarding (Quick anonymous OR Sign in with X)

9// npx tokmax <nick> → fast direct anonymous path (no prompts)

10// npx tokmax login → Sign in with X (nick = your @handle, multi-machine)

11// npx tokmax logout → sign out on this machine (logout --all = every machine)

12// npx tokmax publish → non-interactive publish using the saved token (daily job)

13// npx tokmax daily ... → on | off | status for the daily auto-update

14//

15// SAFETY INVARIANT: only numeric token aggregates per model + dates leave this

16// machine. Never prompt text, file contents, API keys, or raw log lines.

17

18import path from 'node:path';

19import readline from 'node:readline';

20import { spawn } from 'node:child_process';

21import { readFile } from 'node:fs/promises';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/tokmax.mjsView on unpkg · L19

22import { fileURLToPath } from 'node:url';

23

24import { scanClaudeCode } from '../src/adapters/claude-code.mjs';

25import { scanCodex } from '../src/adapters/codex.mjs';

26import { aggregate } from '../src/aggregate.mjs';

27import {

28 aggregateSources,

29 aggregateDailyCost,

30 aggregateModelSpend,

31 aggregateDailyModelSpend,

32 buildRateMap,

33 ATTRIBUTION,

34} from '../src/pricing.mjs';

35import { publish } from '../src/publish.mjs';

36import { anonymousMachineLabel } from '../src/util.mjs';

37import {

38 loadSecret,

39 saveSecret,

•matchType = previous_version_dangerous_delta matchedPackage = tokmax@0.9.16 matchedIdentity = npm:dG9rbWF4:0.9.16 similarity = 0.923 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

bin/tokmax.mjsView on unpkg