registry / @diffexai/diffex / 0.2.2
@diffexai/diffex@0.2.2
Coding agent CLI with read, bash, edit, write, update_plan tools and session management
AI Security Review
scanned 3h ago · by lpm-firewall-aiThe reviewed findings fit the package’s coding-agent functionality. The Gist pointer comes from provider-key help text and a viewer URL; actual Gist creation is a user-triggered private-share operation, and no automatic credential forwarding was found.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; Gist creation occurs only through the interactive sharing flow.
Impact
No malicious impact identified in the reviewed source.
Mechanism
The sharing flow creates a private Gist with the GitHub CLI and builds a viewer URL from its ID. No automatic provider-key transfer to Gist was found in the reviewed code.
AI rationale
The reviewed findings fit the package’s coding-agent functionality. The Gist pointer comes from provider-key help text and a viewer URL; actual Gist creation is a user-triggered private-share operation, and no automatic credential forwarding was found.
Evidence
dist/cli.jsdist/modes/interactive/interactive-mode.jsdist/config.jsdist/core/resolve-config-value.js
Network endpoints1
gist.github.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a coding-agent CLI and library entry points.
- The Gist operation is initiated through an explicit sharing flow and invokes `gh gist create --public=false` on a temporary file.
- `gist.github.com` is used to build a viewer URL from a Gist ID; the code shown does not send provider credentials there.
- Shell commands in config values are executed as part of resolving configured values.
Evidence against
- The CLI starts the agent and configures HTTP behavior when invoked.
- The package includes shell execution, network clients, and filesystem operations that support its coding-agent features.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
8 flaggeddist/core/extensions/loader.jsView file
49};
L50: const require = createRequire(import.meta.url);
L51: const isTypeScriptSourceRuntime = !isBunBinary && path.extname(fileURLToPath(import.meta.url)) === ".ts";
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/core/extensions/loader.jsView on unpkg · L49dist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView file
•path = dist/node_modules/@diffexai/diffex-[redacted]-x64/darwin-modifiers.node
kind = native_binary
sizeBytes = 12776
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView on unpkgFindings
6 High5 Medium3 Low
HighSemantic Analysis Limiteddist/config.js#virtual:string-array:round1
HighKnown Malware Source Similaritydist/utils/shell.js
HighKnown Malware Source Similaritydist/core/resolve-config-value.js
HighKnown Malware Source Similaritydist/modes/rpc/rpc-client.js
HighKnown Malware Source Similaritydist/utils/clipboard.js
HighPrevious Version Dangerous Deltadist/config.js
MediumDynamic Requiredist/core/extensions/loader.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.node
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to @diffexai/diffex@0.2.2.
See all versions of @diffexai/diffex for other recorded verdicts.
- Review the evidence and your use of @diffexai/diffex@0.2.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.