registry / @companion-ai/feynman / 0.3.43
@companion-ai/feynman@0.3.43
Research-first CLI agent built on Pi and alphaXiv
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNot malicious by inspected source: preinstall is a Node-version guard and no concrete hostile chain was found. Warn because the user-invoked CLI mutates a bundled AI-agent runtime and ships an opaque compressed runtime workspace.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs the feynman CLI.
Impact
Modifies the package's Pi/Feynman runtime rather than a broad foreign agent configuration surface.
Mechanism
Version-gated mutation of bundled Pi runtime files and workspace restoration.
AI rationale
Not malicious by inspected source: preinstall is a Node-version guard and no concrete hostile chain was found. Warn because the user-invoked CLI mutates a bundled AI-agent runtime and ships an opaque compressed runtime workspace.
Evidence
package.jsonscripts/check-node-version.mjsbin/feynman.jsdist/index.jsdist/pi/runtime-patches.jsscripts/patch-embedded-pi.mjs.feynman/runtime-workspace.tgz.feynman/npm/node_modules
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Benign with medium false-positive risk.
Evidence for warning
- CLI startup imports a Pi patching script before the main program.
- Runtime code rewrites matching Pi dependency files in package and Feynman runtime roots.
- Package ships a compressed runtime workspace restored during Feynman setup.
Evidence against
- The only npm preinstall hook checks the supported Node version and does not write files or make requests.
- Patching is activated by explicit feynman CLI execution, not npm installation.
- Runtime patching is version-gated to the bundled Pi version; no credential collection or exfiltration was found in inspected paths.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationProtestware
Source & flagged code
12 flaggedpackage.jsonView file
•scripts.preinstall = node ./scripts/check-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/feynman.jsView file
25if (compareNodeVersions(parsedNodeVersion, parseNodeVersion(MIN_NODE_VERSION)) < 0 || parsedNodeVersion.major > MAX_NODE_MAJOR) {
L26: const isWindows = process.platform === "win32";
L27: console.error(`feynman supports Node.js ${MIN_NODE_VERSION} through ${MAX_NODE_MAJOR}.x (detected ${process.versions.node}).`);
...
L30: : isWindows
L31: ? "Install a supported Node.js release from https://nodejs.org, or use the standalone installer:"
L32: : `Switch to a supported Node release with \`nvm install ${PREFERRED_NODE_MAJOR} && nvm use ${PREFERRED_NODE_MAJOR}\`, or use the standalone installer:`);
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
bin/feynman.jsView on unpkg · L25Findings
1 Critical5 High9 Medium7 Low
CriticalTrojan Source Unicodedist/workbench-web/assets/index-BNB2OrGw.js
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitybin/feynman.js
HighShips High Entropy Blob.feynman/runtime-workspace.tgz
HighPayload In Excluded Dir.feynman/runtime-workspace.tgz
HighSemantic Analysis Limiteddist/workbench-web/assets/dist-DQ8bJuTd.js
MediumDynamic Requirebin/feynman.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Wasm Moduledist/workbench-web/assets/RDKit_minimal-tnscgqxm.wasm
MediumShips Build Helperscripts/install/install-skills.sh
Affected versions and remediation
This report applies to @companion-ai/feynman@0.3.43.
See all versions of @companion-ai/feynman for other recorded verdicts.
- Review the evidence and your use of @companion-ai/feynman@0.3.43 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.