registry / @companion-ai/feynman / 0.3.27
@companion-ai/feynman@0.3.27
Research-first CLI agent built on Pi and alphaXiv
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThis is not malicious under the stated boundary because the risky setup occurs after explicit CLI execution and is scoped to Feynman/Pi runtime setup. Warn due to automatic runtime patching and optional system package installation.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs the feynman CLI.
Impact
Modifies the package-owned Feynman/Pi runtime and may install Pandoc on global macOS use.
Mechanism
First-party Pi runtime extraction, patching, and optional dependency provisioning.
AI rationale
This is not malicious under the stated boundary because the risky setup occurs after explicit CLI execution and is scoped to Feynman/Pi runtime setup. Warn due to automatic runtime patching and optional system package installation.
Evidence
package.jsonscripts/check-node-version.mjsbin/feynman.jsscripts/patch-embedded-pi.mjs.feynman/settings.json.feynman/runtime-workspace.tgz
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- CLI imports a runtime patcher before launching the app.
- Patcher deletes and extracts its bundled runtime workspace.
- Patcher rewrites configured Pi subagent package files.
- Global macOS CLI runs Homebrew to install Pandoc when absent.
Evidence against
- The preinstall hook only enforces a Node-version range.
- Archive extraction verifies a packaged SHA-256 first.
- No credential harvesting, covert exfiltration, or install-time foreign-agent mutation was confirmed.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings
Source & flagged code
14 flaggedpackage.jsonView file
•scripts.preinstall = node ./scripts/check-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/workbench-web/assets/3Dmol-D4OPhBxL.jsView file
1692`+p[g],g++;n.push(e)}else n.push(p[g]);else n.push(r.trim());g++}else if(p[g].substring(0,5)===`loop_`){g++;let t=[];for(;p[g]===``||p[g][0]===`_`;){if(p[g]!==``){let n=p[g].split(...
L1693: `);continue}else break}return n}},"./src/parsers/PDB.ts"(e,t,n){n.r(t),n.d(t,{PDB:()=>i});var r=n(`./src/parsers/utils/getSinglePDB.ts`);function i(e,t){t||={};var n=[],i={};n.mode...
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/workbench-web/assets/3Dmol-D4OPhBxL.jsView on unpkg · L1692bin/feynman.jsView file
Findings
1 Critical6 High9 Medium7 Low
CriticalTrojan Source Unicodedist/workbench-web/assets/index-Dn1dPtCn.js
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitybin/feynman.js
HighShips High Entropy Blob.feynman/runtime-workspace.tgz
HighPayload In Excluded Dir.feynman/runtime-workspace.tgz
HighSemantic Analysis Limiteddist/workbench-web/assets/dist-7ytHgirA.js
HighPrevious Version Dangerous Deltascripts/verify-installed-runtime.mjs
MediumDynamic Requirebin/feynman.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Wasm Moduledist/workbench-web/assets/RDKit_minimal-tnscgqxm.wasm
Affected versions and remediation
This report applies to @companion-ai/feynman@0.3.27.
See all versions of @companion-ai/feynman for other recorded verdicts.
- Review the evidence and your use of @companion-ai/feynman@0.3.27 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.