The @ohos-ports/codex npm package (version 0.140.0-beta.0) includes a dependency on '@openai/codex' that is resolved from a mutable tarball URL hosted by a third-party entity on gitcode.com rather than the official OpenAI source. This dependency resolution method allows the third party to supply arbitrary code under the '@openai/codex' namespace, which is imported and executed by the package's own code. Since the dependency is declared in the dependencies field, typical npm install mitigations such as ignoring lifecycle scripts do not prevent the malicious code from being installed and executed. The mutable reference to the 'main' branch without a fixed commit or integrity hash means the code served can be changed at any time, increasing the risk of supply chain compromise.

Users installing @ohos-ports/codex version 0.140.0-beta.0 may unknowingly execute malicious code controlled by a third-party organization masquerading as '@openai/codex'. This can lead to arbitrary code execution within the context of the installing environment. The threat arises from the supply chain compromise via a mutable dependency URL, which bypasses common npm security mitigations.

No official patch or fix is currently documented for this issue. Users should avoid installing version 0.140.0-beta.0 of @ohos-ports/codex until the dependency on the mutable third-party tarball URL is removed or replaced with a fixed, verified source. Monitoring the vendor or package maintainer advisories for updates is recommended. Since the malicious code is loaded via a dependency URL without integrity verification, users should verify dependencies and avoid packages that rely on mutable external tarball URLs from untrusted sources.