npm @openai/codex @0.137.0
score
0.7
high
flagged
2026-06-05 05:34
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.137.0 but max published is 0.138.0-alpha.1-linux-x64 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/openai/codex.git' also claimed by 7 package(s) under different publishers: ['npm/@openai/codex-responses-api-proxy', 'npm/@openai/codex-sdk', 'npm/@codexed/codex'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"dylan-hurd-openai",
"moustafa-openai",
"tylersmith-openai",
"jbeckwith-oai",
"atty-openai",
"tibo-openai",
"dkundel-openai",
"mbolin-openai",
"fouad-openai",
"easong-openai",
"aibrahim-openai",
"apcha-oai",
"seratch-openai"
],
"versions": 2634
}
Evidence (package doc at flag time)
{
"dependencies_count": 0,
"dist": {
"integrity": "sha512-1jUsCnzDBwv7Z4VFZajIlsz41fC18qg6d5qK4PEZhiUk0zJHS90/uGBA70aQPUJLTUZShvyKVAANjw6J/D9eYQ==",
"tarball": "https://registry.npmjs.org/@openai/codex/-/codex-0.137.0.tgz",
"unpackedSize": 10802
},
"dist-tags": {
"alpha": "0.138.0-alpha.4",
"alpha-darwin-arm64": "0.138.0-alpha.4-darwin-arm64",
"alpha-darwin-x64": "0.138.0-alpha.4-darwin-x64",
"alpha-linux-arm64": "0.138.0-alpha.4-linux-arm64",
"alpha-linux-x64": "0.138.0-alpha.4-linux-x64",
"alpha-win32-arm64": "0.138.0-alpha.4-win32-arm64",
"alpha-win32-x64": "0.138.0-alpha.4-win32-x64",
"beta": "0.1.2505172116",
"darwin-arm64": "0.137.0-darwin-arm64",
"darwin-x64": "0.137.0-darwin-x64",
"latest": "0.137.0",
"linux-arm64": "0.137.0-linux-arm64",
"linux-x64": "0.137.0-linux-x64",
"native": "0.1.2505291658",
"win32-arm64": "0.137.0-win32-arm64",
"win32-x64": "0.137.0-win32-x64"
},
"latest_version": "0.137.0",
"maintainers": [
{
"email": "dylan.hurd@openai.com",
"name": "dylan-hurd-openai"
},
{
"email": "moustafa@openai.com",
"name": "moustafa-openai"
},
{
"email": "tylersmith@openai.com",
"name": "tylersmith-openai"
},
{
"email": "jbeckwith@openai.com",
"name": "jbeckwith-oai"
},
{
"email": "atty@openai.com",
"name": "atty-openai"
},
{
"email": "tibo@openai.com",
"name": "tibo-openai"
},
{
"email": "dkundel@openai.com",
"name": "dkundel-openai"
},
{
"email": "mbolin@openai.com",
"name": "mbolin-openai"
},
{
"email": "fouad@openai.com",
"name": "fouad-openai"
},
{
"email": "easong@openai.com",
"name": "easong-openai"
},
{
"email": "ahmedibrhm32@gmail.com",
"name": "aibrahim-openai"
},
{
"email": "apcha@openai.com",
"name": "apcha-oai"
},
{
"email": "seratch@openai.com",
"name": "seratch-openai"
}
],
"num_versions": 2634,
"repository": {
"directory": "codex-cli",
"type": "git",
"url": "git+https://github.com/openai/codex.git"
},
"scripts": null,
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.137.0 but max published is 0.138.0-alpha.1-linux-x64",
"shared_repo_different_publisher": "repo 'git+https://github.com/openai/codex.git' also claimed by 7 package(s) under different publishers: ['npm/@openai/codex-responses-api-proxy', 'npm/@openai/codex-sdk', 'npm/@codexed/codex'] ..."
},
"time": {
"created": "2025-04-16T17:04:25.106Z",
"modified": "2026-06-04T22:05:26.551Z"
}
}