Codex Extension running Powershell behind every command

Open 💬 4 comments Opened Apr 9, 2026 by dacoupquie

What version of the IDE extension are you using?

v26.406.31014

What subscription do you have?

Plus

Which IDE are you using?

Antigravity/VS Code

What platform is your computer?

Windows 11 64-bit

What issue are you seeing?

From today, 9th Apri, 10AM BST Time, I'm having an issue in which the Codex IDE Extension runs a Powershell behind every normal command, making my Antivirus app flag it. It used to only be flagged for encoding UTF 8 but now its doing on pretty much every command.

Its doing the following:

The app C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe was passed a malicious command line and has been blocked. Your device is now safe.

Command line: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -EncodedCommand (then a bunch of gibberish)

What steps can reproduce the bug?

Just use Codex normally, every command ran gets this

What is the expected behavior?

_No response_

Additional information

_No response_

View original on GitHub ↗

This issue has 4 comments on GitHub. Read the full discussion on GitHub ↗