
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
codex-wechat-channel
Advanced tools
把微信 ClawBot 消息桥接进 Codex,会话底层走 codex app-server,而不是 Claude Code 的 development channels。
参考 claude-code-wechat-channel 的整体链路,但 Codex 当前公开可用的是 app-server / mcp,没有 Claude 那套 channel 扩展加载入口。因此这个项目采用的是:
WeChat (ClawBot)
-> ilink API
-> codex-wechat-channel
-> embedded Codex app-server
-> per-chat Codex thread
-> plain-text reply back to WeChat
这意味着:
codex app-serverlocalImage 输入传给 Codex>= 22codex CLI,且已登录可用如果当前 shell 没有导出 OPENAI_API_KEY,桥接会优先复用 codex login 写入的 ~/.codex/auth.json。两者都缺失时,启动会在连接 app-server 前直接报错。
推荐直接运行:
npx codex-wechat-channel help
如果你想长期使用:
npm install -g codex-wechat-channel
codex-wechat-channel help
在本地仓库开发时,仍可继续使用 node cli.mjs ... 或 npm run ...。
npm login
npm pack
npm publish --access public
发布后即可直接使用:
npx codex-wechat-channel help
codex-wechat-channel setup
凭据会保存在:
~/.codex/channels/wechat/account.json
codex-wechat-channel start
如果需要指定工作目录或模型:
codex-wechat-channel start --cwd D:\workspace\myrepo --model gpt-5.4
codex-wechat-channel probe
预期输出:
PONG
如果你想把桥接放到后台运行,可直接使用:
codex-wechat-channel bridge start
codex-wechat-channel bridge status
codex-wechat-channel probe
codex-wechat-channel bridge stop
codex-wechat-channel service install --cwd /home/ubuntu
需要透传启动参数时:
codex-wechat-channel bridge start --cwd D:\workspace\myrepo --model gpt-5.4
如果你是在本地仓库内开发,也可以继续用:
npm run bridge:start
npm run bridge:status
npm run bridge:probe
npm run bridge:stop
如果你在 Linux 服务器上跑 bridge,并且希望:
~/.codex/config.toml、~/.codex/AGENTS.md、~/.codex/skills/、~/.codex/prompts/ 后自动重启 bridge可以直接执行:
sudo codex-wechat-channel service install --cwd /home/ubuntu
如果你是通过 sudo 执行,安装命令会优先使用 SUDO_USER 对应的用户与 home 目录来写入 systemd 配置和 PIDFile。如果你的部署用户不是当前 sudo 来源,也可以显式覆盖:
sudo codex-wechat-channel service install --cwd /srv/repo --user ubuntu --home /home/ubuntu
重复执行 service install 会覆盖已有 unit 文件,并强制重启正在运行的 bridge / watcher,让新配置立即生效。
安装后会创建:
codex-wechat-channel.servicecodex-wechat-channel-watch.service查看状态:
codex-wechat-channel service status
卸载:
sudo codex-wechat-channel service uninstall
CODEX_BIN=codex
CODEX_WECHAT_CWD=D:\workspace\repo
CODEX_WECHAT_MODEL=gpt-5.4
CODEX_WECHAT_SANDBOX=danger-full-access
CODEX_WECHAT_APPROVAL_POLICY=never
CODEX_WECHAT_APP_SERVER_URL=ws://127.0.0.1:4501
CODEX_WECHAT_BASE_URL=https://ilinkai.weixin.qq.com
CODEX_WECHAT_DEVELOPER_INSTRUCTIONS=Always answer as a senior engineer.
OPENAI_API_KEY=sk-...
项目会在 ~/.codex/channels/wechat/ 下维护:
account.json:微信 bot tokenbridge.pid:后台桥接进程 PIDbridge.stdout.log:后台桥接标准输出bridge.stderr.log:后台桥接标准错误context_tokens.json:WeChat reply contextthreads.json:conversation -> Codex thread 映射sync_buf.txt:微信 long polling 游标media/:下载下来的图片附件approvalPolicy=never,因为这是一个无人值守桥。如果你改成需要审批,桥接会卡住。sandbox=danger-full-access,方便远端无人值守运行。若你需要收紧权限,可显式设置 CODEX_WECHAT_SANDBOX=workspace-write 或 read-only。OPENAI_API_KEY,embedded app-server 会尝试读取 ~/.codex/auth.json 中由 codex login 保存的 key。FAQs
Bridge WeChat ClawBot messages into Codex app-server threads
The npm package codex-wechat-channel receives a total of 13 weekly downloads. As such, codex-wechat-channel popularity was classified as not popular.
We found that codex-wechat-channel demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.