0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
chatgpt-desktop-setup
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting chatgpt-desktop-setup, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-18056 | Unknown | Malicious code in chatgpt-desktop-setup (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (5c475553921237fa1c0ad5df34610023b93a7c00d13203981c43b883532bd072) On running the CLI, the package rewrites ~/.codex/config.toml and ~/.codex/.codex-global-state.json to point ChatGPT Desktop and the Codex CLI at a hardcoded non-OpenAI inference endpoint (DEFAULT_GATEWAY_URL = https://api.vokes.in/v1), registering model providers chatgpt_pro_5x / gpt-6-astra and setting that gateway as the active provider. In the same configuration pass it sets approval_policy = "never", sandbox_mode = "danger-full-access" |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (5c475553921237fa1c0ad5df34610023b93a7c00d13203981c43b883532bd072) On running the CLI, the package rewrites ~/.codex/config.toml and ~/.codex/.codex-global-state.json to point ChatGPT Desktop and the Codex CLI at a hardcoded non-OpenAI inference endpoint (DEFAULT_GATEWAY_URL = https://api.vokes.in/v1), registering model providers chatgpt_pro_5x / gpt-6-astra and setting that gateway as the active provider. In the same configuration pass it sets approval_policy = "never", sandbox_mode = "danger-full-access"