registry / @companion-ai/feynman / 0.3.32
@companion-ai/feynman@0.3.32
Research-first CLI agent built on Pi and alphaXiv
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has an automatic, user-triggered Pi extension setup and patching chain. Its install hook is only a version check, and no concrete exfiltration or malicious install-time mutation was established.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
A user runs the feynman CLI.
Impact
Configured extension packages and their installed Pi subagent files can be created or modified under Feynman-managed runtime directories.
Mechanism
Automatic installation and patching of configured Pi extensions.
AI rationale
The package has an automatic, user-triggered Pi extension setup and patching chain. Its install hook is only a version check, and no concrete exfiltration or malicious install-time mutation was established.
Evidence
bin/feynman.js.feynman/settings.jsonscripts/patch-embedded-pi.mjs.feynman/npm/.feynman/npm-global/
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI always imports a runtime patcher before starting the application.
- The patcher reads the packaged settings and installs listed npm packages into its workspace when the runtime is absent.
- The packaged settings include Pi subagent, web-access, and telemetry extensions.
- The runtime patcher rewrites installed Pi subagent files when their patch output differs.
Evidence against
- The npm preinstall hook only runs the Node-version checker.
- The inspected token handling sends a Hugging Face token only as an authorization header to the request URL; no unrelated recipient was established.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetry
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.preinstall = node ./scripts/check-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/setup/preview.jsView file
1import { spawnSync } from "node:child_process";
L2: import { BREW_FALLBACK_PATHS, PANDOC_FALLBACK_PATHS, resolveExecutable } from "../system/executables.js";
High
Child Process
Package source references child process execution.
dist/setup/preview.jsView on unpkg · L1extensions/research-tools/workbench-connectors.tsView file
361
Findings
1 Critical14 High9 Medium8 Low
CriticalTrojan Source Unicodedist/workbench-web/assets/index-Dn1dPtCn.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/setup/preview.js
HighShellextensions/research-tools/workbench-connectors.ts
HighSame File Env Network Executionnode_modules/@earendil-works/pi-coding-agent/node_modules/google-auth-library/build/src/auth/googleauth.js#virtual:normalized:round1
HighCommand Output Exfiltrationnode_modules/@earendil-works/pi-coding-agent/examples/extensions/doom-overlay/doom/build/doom.js
HighSandbox Evasion Gated Capabilitybin/feynman.js
HighCloud Metadata Accessnode_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
HighShips High Entropy Blob.feynman/runtime-workspace.tgz
Affected versions and remediation
This report applies to @companion-ai/feynman@0.3.32.
See all versions of @companion-ai/feynman for other recorded verdicts.
- Review the evidence and your use of @companion-ai/feynman@0.3.32 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.