Is mcp-codex-worker safe to install?

mcp-codex-worker was flagged as CRITICAL RISK (risk score 198) with 18 findings detected across 559 files. Review the findings before installing.

What security issues were found in mcp-codex-worker?

Sigil detected 18 findings in mcp-codex-worker, including patterns related to code_patterns, network_exfil. See the full scan report for details.

Scans/npm/mcp-codex-worker

mcp-codex-worker

npm

Summary

mcp-codex-worker v1.0.7 was classified as CRITICAL RISK with a risk score of 198. Sigil detected 18 findings across 559 files, covering phases including code patterns, network exfiltration. Review the findings below before installing this package.

CRITICAL RISK(198)

v1.0.7

10 April 2026, 13:37 UTC

by Sigil Bot

Risk Score

198

Findings

Files Scanned

559

Provenance

Registry

https://www.npmjs.com/package/mcp-codex-worker/v/1.0.7

Scanned From

https://registry.npmjs.org/mcp-codex-worker/-/mcp-codex-worker-1.0.7.tgz

Findings by Phase

•

Phase Ordering

Phases are ordered by criticality, with the most dangerous at the top. Click any phase header to expand or collapse its findings. Critical phases are expanded by default.

Badge

Markdown

[![Sigil Scan](https://sigilsec.ai/badge/npm/mcp-codex-worker)](https://sigilsec.ai/scans/A858D67C-22BD-43B7-9563-9A04CCC08D9F)

HTML

<a href="https://sigilsec.ai/scans/A858D67C-22BD-43B7-9563-9A04CCC08D9F"><img src="https://sigilsec.ai/badge/npm/mcp-codex-worker" alt="Sigil Scan"></a>

Run This Scan Yourself