w3bs.AccountStart building
PACKAGES / OpenAI

OpenAI Codex CLI

Lightweight coding agent from OpenAI that runs in the terminal.

ThreatCrush · No malware found
INSTALLw3bs install openai.com/codex

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install openai.com/codexInstall OpenAI Codex CLI and track it for updates
  2. codexStart an interactive session; first run asks you to sign in with ChatGPT
  3. codex exec "<task>"Run a task non-interactively, for scripts and CI
  4. codex resumeResume a saved conversation

Every option: codex --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in OpenAI Codex CLI 0.162.1. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-03 10:50 UTC · threatcrush 0.13.30
Files
7801 (installer + github.com/openai/codex@62d650d5278a)
Findings
1 critical · 13 high · 3 medium · 200 low
100+ other findings (not malware)
  • critical
    Private Keysource/codex-rs/login/src/auth/auth_tests.rs:3047secret-private-key · CWE-798
  • high
    outbound request to a non-constant URLsource/.github/scripts/macos-signing/notarize_with_akv.py:260py-ssrf-outbound-request · CWE-918
  • high
    outbound request to a non-constant URLsource/.github/scripts/macos-signing/notarize_with_akv.py:373py-ssrf-outbound-request · CWE-918
  • high
    outbound request to a non-constant URLsource/.github/scripts/macos-signing/notarize_with_akv.py:405py-ssrf-outbound-request · CWE-918
  • high
    TLS certificate verification disabledsource/.github/scripts/publish_r2_release.py:433tls-verification-disabled · CWE-295
  • high
    Sensitive filesource/codex-rs/http-client/tests/fixtures/test-ca-trusted.pem:1sensitive-file-committed · CWE-538
  • high
    Sensitive filesource/codex-rs/http-client/tests/fixtures/test-ca.pem:1sensitive-file-committed · CWE-538
  • high
    Sensitive filesource/codex-rs/http-client/tests/fixtures/test-intermediate.pem:1sensitive-file-committed · CWE-538
  • high
    Generic API Keysource/codex-rs/login/src/auth/bedrock_api_key_tests.rs:42secret-generic-api-key · CWE-798
  • high
    Generic API Keysource/codex-rs/model-provider/src/provider_tests.rs:118secret-generic-api-key · CWE-798
  • high
    outbound request to a non-constant URLsource/scripts/codex_package/dotslash.py:172py-ssrf-outbound-request · CWE-918
  • high
    outbound request to a non-constant URLsource/sdk/python/_runtime_setup.py:163py-ssrf-outbound-request · CWE-918
  • high
    outbound request to a non-constant URLsource/sdk/python/_runtime_setup.py:191py-ssrf-outbound-request · CWE-918
  • high
    outbound request to a non-constant URLsource/sdk/python/_runtime_setup.py:223py-ssrf-outbound-request · CWE-918
  • medium
    JSON Web Tokensource/codex-rs/model-provider/src/auth_tests.rs:31secret-jwt · CWE-798
  • medium
    unquoted expansion in a destructive commandsource/scripts/test-remote-env.sh:76sh-unquoted-expansion-destructive · CWE-78
  • medium
    eval on an expanded stringsource/scripts/test-remote-env.sh:141sh-eval-expansion · CWE-78
  • low
    Private Keysource/codex-rs/agent-identity/src/lib.rs:832secret-private-key · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/analytics/src/client_tests.rs:1234secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/app-server-client/src/lib.rs:1622secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/app-server-protocol/src/protocol/common.rs:3634secret-generic-credential · CWE-798
  • low
    OpenAI API Keysource/codex-rs/app-server-protocol/src/protocol/item_builders_tests.rs:14secret-openai-key · CWE-798
  • low
    Generic API Keysource/codex-rs/app-server-protocol/src/protocol/item_builders_tests.rs:14secret-generic-api-key · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/app-server-transport/src/transport/remote_control/tests.rs:121secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/app-server-transport/src/transport/remote_control/websocket.rs:2074secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/app-server/src/models_refresh_worker_tests.rs:257secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/app-server/tests/suite/v2/account.rs:1170secret-generic-credential · CWE-798
  • low
    Generic API Keysource/codex-rs/app-server/tests/suite/v2/account.rs:1332secret-generic-api-key · CWE-798
  • low
    Generic API Keysource/codex-rs/app-server/tests/suite/v2/account.rs:1564secret-generic-api-key · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/app-server/tests/suite/v2/connection_handling_websocket.rs:310secret-generic-credential · CWE-798
  • low
    High-entropy Hex Tokensource/codex-rs/app-server/tests/suite/v2/connection_handling_websocket.rs:310secret-hex-token · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/app-server/tests/suite/v2/connection_handling_websocket.rs:338secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/app-server/tests/suite/v2/gateway_oauth_tests.rs:234secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/cli/src/doctor.rs:3301secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/cli/src/doctor/desktop/windows_security_tests.rs:67secret-generic-credential · CWE-798
  • low
    AWS Access Keysource/codex-rs/cli/src/doctor/output.rs:1899secret-aws-access-key · CWE-798
  • low
    AWS Access Keysource/codex-rs/cli/src/doctor/output.rs:1900secret-aws-access-key · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/cli/tests/exec_server_websocket_auth.rs:40secret-generic-credential · CWE-798
  • low
    High-entropy Hex Tokensource/codex-rs/cli/tests/exec_server_websocket_auth.rs:40secret-hex-token · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/cloud-config/src/service_tests.rs:996secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/cloud-config/src/service_tests.rs:1053secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/codex-mcp/src/connection_manager_tests.rs:6981secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/config/src/loader/tests.rs:266secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/config/src/loader/tests.rs:351secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/config/src/loader/tests.rs:1141secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/config/src/loader/tests.rs:1149secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/config/src/mcp_ema_tests.rs:287secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/config/src/mcp_ema_tests.rs:293secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/config/src/mcp_ema_tests.rs:304secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/config/src/mcp_ema_tests.rs:319secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/config/src/mcp_types_tests.rs:392secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/agent/host/spawn_tests.rs:68secret-generic-credential · CWE-798
  • low
    OpenAI API Keysource/codex-rs/core/src/realtime_conversation_tests.rs:50secret-openai-key · CWE-798
  • low
    OpenAI API Keysource/codex-rs/core/src/realtime_conversation_tests.rs:64secret-openai-key · CWE-798
  • low
    GitHub Tokensource/codex-rs/core/src/shell_snapshot_sandbox_tests.rs:77secret-github-token · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:740secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:742secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:744secret-generic-credential · CWE-798
  • low
    Generic API Keysource/codex-rs/core/src/shell_snapshot_tests.rs:746secret-generic-api-key · CWE-798
  • low
    Generic API Keysource/codex-rs/core/src/shell_snapshot_tests.rs:747secret-generic-api-key · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:750secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:753secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:953secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:1293secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:1348secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:1416secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:1418secret-generic-credential · CWE-798
  • low
    Generic API Keysource/codex-rs/core/src/shell_snapshot_tests.rs:1420secret-generic-api-key · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:1528secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/shell_snapshot_tests.rs:1547secret-generic-credential · CWE-798
  • low
    GitHub Tokensource/codex-rs/core/src/tools/runtimes/mod_tests.rs:773secret-github-token · CWE-798
  • low
    GitHub Tokensource/codex-rs/core/src/tools/runtimes/mod_tests.rs:777secret-github-token · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/src/tools/runtimes/mod_tests.rs:822secret-generic-credential · CWE-798
  • low
    OpenAI API Keysource/codex-rs/core/src/tools/runtimes/mod_tests.rs:832secret-openai-key · CWE-798
  • low
    OpenAI API Keysource/codex-rs/core/src/tools/runtimes/mod_tests.rs:836secret-openai-key · CWE-798
  • low
    Generic API Keysource/codex-rs/core/src/tools/runtimes/mod_tests.rs:1259secret-generic-api-key · CWE-798
  • low
    OpenAI API Keysource/codex-rs/core/tests/suite/client.rs:1530secret-openai-key · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/core/tests/suite/exec_policy.rs:701secret-generic-credential · CWE-798
  • low
    OpenAI API Keysource/codex-rs/core/tests/suite/scenarios_credential_masking.rs:44secret-openai-key · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/exec-server/src/environment_toml.rs:387secret-generic-credential · CWE-798
  • low
    OpenAI API Keysource/codex-rs/exec-server/src/process_sandbox_tests.rs:558secret-openai-key · CWE-798
  • low
    OpenAI API Keysource/codex-rs/exec-server/tests/exec_process.rs:524secret-openai-key · CWE-798
  • low
    JSON Web Tokensource/codex-rs/exec/tests/suite/apply_patch.rs:404secret-jwt · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/ext/guardian-v2/src/async_scorer/sampler_routing_tests.rs:232secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/http-client/src/route_aware_client_pool_tests.rs:449secret-generic-credential · CWE-798
  • low
    Private Keysource/codex-rs/login/src/auth/agent_identity.rs:573secret-private-key · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/auth_tests.rs:160secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/auth_tests.rs:161secret-generic-credential · CWE-798
  • low
    OpenAI API Keysource/codex-rs/login/src/auth/auth_tests.rs:267secret-openai-key · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/auth_tests.rs:1255secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/auth_tests.rs:1256secret-generic-credential · CWE-798
  • low
    OpenAI API Keysource/codex-rs/login/src/auth/auth_tests.rs:1280secret-openai-key · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/auth_tests.rs:1436secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/auth_tests.rs:1437secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/manager/workspace_switching_tests.rs:42secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/personal_access_token_tests.rs:41secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/personal_access_token_tests.rs:72secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/storage_policy_tests.rs:325secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/storage_policy_tests.rs:326secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/codex-rs/login/src/auth/storage_policy_tests.rs:419secret-generic-credential · CWE-798

Showing the first 100 findings.

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/openai.com/codex/badge.svg)](https://w3bs.org/packages/openai.com/codex)