registry / @diffexai/diffex / 0.2.4
@diffexai/diffex@0.2.4
Coding agent CLI with read, bash, edit, write, update_plan tools and session management
AI Security Review
scanned 3h ago · by lpm-firewall-aiThe flagged credential-to-Gist match is a false positive: provider keys are listed in help text, while Gist creation is an explicit session-sharing feature using `gh`. Startup version checking contacts Diffex's own API without credentials; no malicious behavior was identified.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The version check runs at interactive startup; Gist sharing requires the user to enter `/share`.
Impact
No automatic credential theft or unrelated data collection was found. The explicit sharing command uploads the exported session as expected.
Mechanism
The version check contacts Diffex's API without credentials. `/share` exports the session to a temporary file and invokes the user's authenticated GitHub CLI to create a private gist.
AI rationale
The flagged credential-to-Gist match is a false positive: provider keys are listed in help text, while Gist creation is an explicit session-sharing feature using `gh`. Startup version checking contacts Diffex's own API without credentials; no malicious behavior was identified.
Evidence
os.tmpdir()/session.html
Network endpoints2
api.diffex.aigist.github.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a coding-agent CLI and exposes its CLI and JavaScript entry points.
- The Gist flow runs only for an explicit `/share` command, checks the user's GitHub CLI login, and creates a private gist from an exported session.
- The flagged provider credential names appear in CLI help text; the Gist flow uses `gh` authentication and does not read those provider credentials.
- The startup version check targets Diffex's own API, omits credentials, and can be skipped in offline mode.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
8 flaggeddist/core/extensions/loader.jsView file
49};
L50: const require = createRequire(import.meta.url);
L51: const isTypeScriptSourceRuntime = !isBunBinary && path.extname(fileURLToPath(import.meta.url)) === ".ts";
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/core/extensions/loader.jsView on unpkg · L49dist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView file
•path = dist/node_modules/@diffexai/diffex-[redacted]-x64/darwin-modifiers.node
kind = native_binary
sizeBytes = 12776
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView on unpkgFindings
6 High5 Medium3 Low
HighSemantic Analysis Limiteddist/config.js#virtual:string-array:round1
HighKnown Malware Source Similaritydist/utils/shell.js
HighKnown Malware Source Similaritydist/core/resolve-config-value.js
HighKnown Malware Source Similaritydist/modes/rpc/rpc-client.js
HighKnown Malware Source Similaritydist/utils/clipboard.js
HighPrevious Version Dangerous Deltadist/modes/interactive/interactive-mode.js
MediumDynamic Requiredist/core/extensions/loader.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.node
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @diffexai/diffex@0.2.4.
See all versions of @diffexai/diffex for other recorded verdicts.
- Review the evidence and your use of @diffexai/diffex@0.2.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.