registry / @companion-ai/feynman / 0.3.37
@companion-ai/feynman@0.3.37
Research-first CLI agent built on Pi and alphaXiv
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has a real runtime agent-extension mutation surface, so it merits a warning. Its automatic lifecycle hook is limited to a version check, preventing a malicious install-hook classification.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
A user runs the feynman command.
Impact
The command can change agent extension behavior and package links under the user's Feynman runtime directories.
Mechanism
Runtime patching and relinking of Pi agent packages.
AI rationale
The package has a real runtime agent-extension mutation surface, so it merits a warning. Its automatic lifecycle hook is limited to a version check, preventing a malicious install-hook classification.
Evidence
bin/feynman.jsscripts/patch-embedded-pi.mjs$HOME/.feynman/npm-global/**$HOME/.feynman/agent/npm/node_modules/pi-subagents/**
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The feynman command imports a patching script before starting the application.
- The patcher writes modified source into Pi subagent and telemetry package directories under the Feynman runtime.
- The patcher can replace stale package links with symlinks in its Feynman-managed global npm prefix.
Evidence against
- The only automatic preinstall hook runs a Node-version checker, not the patcher.
- The Hugging Face token is sent only as an authorization header to Hugging Face URLs constructed by the extension.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.preinstall = node ./scripts/check-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/setup/preview.jsView file
1import { spawnSync } from "node:child_process";
L2: import { BREW_FALLBACK_PATHS, PANDOC_FALLBACK_PATHS, resolveExecutable } from "../system/executables.js";
High
Child Process
Package source references child process execution.
dist/setup/preview.jsView on unpkg · L1extensions/research-tools/workbench-connectors.tsView file
361
Findings
1 Critical14 High9 Medium8 Low
CriticalTrojan Source Unicodedist/workbench-web/assets/index-BNB2OrGw.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/setup/preview.js
HighShellextensions/research-tools/workbench-connectors.ts
HighSame File Env Network Executionnode_modules/@earendil-works/pi-coding-agent/node_modules/google-auth-library/build/src/auth/googleauth.js#virtual:normalized:round1
HighCommand Output Exfiltrationnode_modules/@earendil-works/pi-coding-agent/examples/extensions/doom-overlay/doom/build/doom.js
HighSandbox Evasion Gated Capabilitybin/feynman.js
HighCloud Metadata Accessnode_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
HighShips High Entropy Blob.feynman/runtime-workspace.tgz
Affected versions and remediation
This report applies to @companion-ai/feynman@0.3.37.
See all versions of @companion-ai/feynman for other recorded verdicts.
- Review the evidence and your use of @companion-ai/feynman@0.3.37 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.