registry / @companion-ai/feynman / 0.3.40
@companion-ai/feynman@0.3.40
Research-first CLI agent built on Pi and alphaXiv
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe source establishes an automatic runtime mutation of external Pi agent installations and conditional system-package installation. It does not establish malware intent or an unconsented npm lifecycle attack, so a warning is appropriate rather than a block.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The user runs the feynman command.
Impact
Existing Pi agent behavior can be changed outside this package's bundled runtime, and a system package may be installed.
Mechanism
Runtime rewriting of Pi agent packages and conditional package-manager execution.
AI rationale
The source establishes an automatic runtime mutation of external Pi agent installations and conditional system-package installation. It does not establish malware intent or an unconsented npm lifecycle attack, so a warning is appropriate rather than a block.
Evidence
bin/feynman.jsscripts/patch-embedded-pi.mjs
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The launcher imports the runtime patcher before loading the application.
- The patcher searches package-local, global, and Feynman-owned Pi subagent locations, then rewrites matching files.
- On a global macOS installation, the patcher can invoke Homebrew to install Pandoc automatically.
Evidence against
- The npm preinstall hook only runs the Node-version checker; it does not invoke the patcher.
- The Hugging Face token is sent only in requests to the fixed huggingface.co API and content URLs.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.preinstall = node ./scripts/check-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/setup/preview.jsView file
1import { spawnSync } from "node:child_process";
L2: import { BREW_FALLBACK_PATHS, PANDOC_FALLBACK_PATHS, resolveExecutable } from "../system/executables.js";
High
Child Process
Package source references child process execution.
dist/setup/preview.jsView on unpkg · L1extensions/research-tools/workbench-connectors.tsView file
361
Findings
1 Critical14 High9 Medium8 Low
CriticalTrojan Source Unicodedist/workbench-web/assets/index-BNB2OrGw.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/setup/preview.js
HighShellextensions/research-tools/workbench-connectors.ts
HighSame File Env Network Executionnode_modules/@earendil-works/pi-coding-agent/node_modules/google-auth-library/build/src/auth/googleauth.js#virtual:normalized:round1
HighCommand Output Exfiltrationnode_modules/@earendil-works/pi-coding-agent/examples/extensions/doom-overlay/doom/build/doom.js
HighSandbox Evasion Gated Capabilitybin/feynman.js
HighCloud Metadata Accessnode_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
HighShips High Entropy Blob.feynman/runtime-workspace.tgz
Affected versions and remediation
This report applies to @companion-ai/feynman@0.3.40.
See all versions of @companion-ai/feynman for other recorded verdicts.
- Review the evidence and your use of @companion-ai/feynman@0.3.40 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.