npm @openai/codex @0.140.0
score
0.7
high
flagged
2026-06-15 20:04
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.140.0 but max published is 0.141.0-alpha.1-linux-x64 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/openai/codex.git' also claimed by 8 package(s) under different publishers: ['npm/@zzy_hacker/vcode', 'npm/@openai/codex-sdk', 'npm/@codexed/codex-linux-arm64'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"dylan-hurd-openai",
"moustafa-openai",
"tylersmith-openai",
"jbeckwith-oai",
"atty-openai",
"tibo-openai",
"dkundel-openai",
"mbolin-openai",
"fouad-openai",
"easong-openai",
"aibrahim-openai",
"apcha-oai",
"seratch-openai"
],
"versions": 2822
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-FMnN12kJzVPljMTYRydLCNgd0cXXmVasNSfq2PtS42RMEIxoQ3dHtMvmno35hu2tfwrKNAAPCm4s+2PaFTEBGg==",
"tarball": "https://registry.npmjs.org/@openai/codex/-/codex-0.140.0.tgz",
"unpackedSize": 9718
},
"dist-tags": {
"alpha": "0.140.0-alpha.22",
"alpha-darwin-arm64": "0.141.0-alpha.1-darwin-arm64",
"alpha-darwin-x64": "0.141.0-alpha.1-darwin-x64",
"alpha-linux-arm64": "0.141.0-alpha.1-linux-arm64",
"alpha-linux-x64": "0.141.0-alpha.1-linux-x64",
"alpha-win32-arm64": "0.140.0-alpha.22-win32-arm64",
"alpha-win32-x64": "0.141.0-alpha.1-win32-x64",
"beta": "0.1.2505172116",
"darwin-arm64": "0.140.0-darwin-arm64",
"darwin-x64": "0.140.0-darwin-x64",
"latest": "0.140.0",
"linux-arm64": "0.140.0-linux-arm64",
"linux-x64": "0.140.0-linux-x64",
"native": "0.1.2505291658",
"win32-arm64": "0.140.0-win32-arm64",
"win32-x64": "0.140.0-win32-x64"
},
"latest_version": "0.140.0",
"maintainers": [
{
"email": "dylan.hurd@openai.com",
"name": "dylan-hurd-openai"
},
{
"email": "moustafa@openai.com",
"name": "moustafa-openai"
},
{
"email": "tylersmith@openai.com",
"name": "tylersmith-openai"
},
{
"email": "jbeckwith@openai.com",
"name": "jbeckwith-oai"
},
{
"email": "atty@openai.com",
"name": "atty-openai"
},
{
"email": "tibo@openai.com",
"name": "tibo-openai"
},
{
"email": "dkundel@openai.com",
"name": "dkundel-openai"
},
{
"email": "mbolin@openai.com",
"name": "mbolin-openai"
},
{
"email": "fouad@openai.com",
"name": "fouad-openai"
},
{
"email": "easong@openai.com",
"name": "easong-openai"
},
{
"email": "ahmedibrhm32@gmail.com",
"name": "aibrahim-openai"
},
{
"email": "apcha@openai.com",
"name": "apcha-oai"
},
{
"email": "seratch@openai.com",
"name": "seratch-openai"
}
],
"num_versions": 2823,
"repository": {
"directory": "codex-cli",
"type": "git",
"url": "git+https://github.com/openai/codex.git"
},
"scripts": null,
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.140.0 but max published is 0.141.0-alpha.1-linux-x64",
"shared_repo_different_publisher": "repo 'git+https://github.com/openai/codex.git' also claimed by 8 package(s) under different publishers: ['npm/@zzy_hacker/vcode', 'npm/@openai/codex-sdk', 'npm/@codexed/codex-linux-arm64'] ..."
},
"time": {
"created": "2025-04-16T17:04:25.106Z",
"modified": "2026-06-16T01:03:41.881Z"
}
}