codyx-ai-linux-x64-baseline@1.14.42

Analysis

Package ships a 148MB precompiled binary at package/bin/codyx as its sole payload. No JavaScript source code, no lifecycle hooks, and no executable entry points are included — the package cannot execute on its own during install. The binary is a Bun-compiled CLI application containing embedded API key configuration logic for AI providers (OpenAI, Anthropic, Cloudflare, Vercel, AWS) and references to opencode[.]ai as a service endpoint. The binary cannot be source-audited and may contain hidden runtime behaviour that is not visible from static string analysis. No network IOCs or exfiltration endpoints were identifiable from static analysis alone.