npm @openai/codex @0.139.0
score
0.7
high
flagged
2026-06-10 17:48
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.139.0 but max published is 0.140.0-alpha.2-linux-x64 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/openai/codex.git' also claimed by 8 package(s) under different publishers: ['npm/@zzy_hacker/vcode', 'npm/@codexed/codex-linux-arm64', 'npm/@codexed/codex-linux-x64'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"dylan-hurd-openai",
"moustafa-openai",
"tylersmith-openai",
"jbeckwith-oai",
"atty-openai",
"tibo-openai",
"dkundel-openai",
"mbolin-openai",
"fouad-openai",
"easong-openai",
"aibrahim-openai",
"apcha-oai",
"seratch-openai"
],
"versions": 2711
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-wr2fRE+fzW0CjEbfFsLh1ftarVEcw0CMLWS7QyA0nyOz5qacQPVq3cq2+/U7oEbwm1TOqoi0Fm1nxniB5FkpmA==",
"tarball": "https://registry.npmjs.org/@openai/codex/-/codex-0.139.0.tgz",
"unpackedSize": 9718
},
"dist-tags": {
"alpha": "0.140.0-alpha.4",
"alpha-darwin-arm64": "0.140.0-alpha.4-darwin-arm64",
"alpha-darwin-x64": "0.140.0-alpha.4-darwin-x64",
"alpha-linux-arm64": "0.140.0-alpha.7-linux-arm64",
"alpha-linux-x64": "0.140.0-alpha.7-linux-x64",
"alpha-win32-arm64": "0.140.0-alpha.4-win32-arm64",
"alpha-win32-x64": "0.140.0-alpha.4-win32-x64",
"beta": "0.1.2505172116",
"darwin-arm64": "0.139.0-darwin-arm64",
"darwin-x64": "0.139.0-darwin-x64",
"latest": "0.139.0",
"linux-arm64": "0.139.0-linux-arm64",
"linux-x64": "0.139.0-linux-x64",
"native": "0.1.2505291658",
"win32-arm64": "0.139.0-win32-arm64",
"win32-x64": "0.139.0-win32-x64"
},
"latest_version": "0.139.0",
"maintainers": [
{
"email": "dylan.hurd@openai.com",
"name": "dylan-hurd-openai"
},
{
"email": "moustafa@openai.com",
"name": "moustafa-openai"
},
{
"email": "tylersmith@openai.com",
"name": "tylersmith-openai"
},
{
"email": "jbeckwith@openai.com",
"name": "jbeckwith-oai"
},
{
"email": "atty@openai.com",
"name": "atty-openai"
},
{
"email": "tibo@openai.com",
"name": "tibo-openai"
},
{
"email": "dkundel@openai.com",
"name": "dkundel-openai"
},
{
"email": "mbolin@openai.com",
"name": "mbolin-openai"
},
{
"email": "fouad@openai.com",
"name": "fouad-openai"
},
{
"email": "easong@openai.com",
"name": "easong-openai"
},
{
"email": "ahmedibrhm32@gmail.com",
"name": "aibrahim-openai"
},
{
"email": "apcha@openai.com",
"name": "apcha-oai"
},
{
"email": "seratch@openai.com",
"name": "seratch-openai"
}
],
"num_versions": 2713,
"repository": {
"directory": "codex-cli",
"type": "git",
"url": "git+https://github.com/openai/codex.git"
},
"scripts": null,
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.139.0 but max published is 0.140.0-alpha.2-linux-x64",
"shared_repo_different_publisher": "repo 'git+https://github.com/openai/codex.git' also claimed by 8 package(s) under different publishers: ['npm/@zzy_hacker/vcode', 'npm/@codexed/codex-linux-arm64', 'npm/@codexed/codex-linux-x64'] ..."
},
"time": {
"created": "2025-04-16T17:04:25.106Z",
"modified": "2026-06-10T22:48:30.693Z"
}
}