registry / @diffexai/diffex / 0.2.5
@diffexai/diffex@0.2.5
Coding agent CLI with read, bash, edit, write, update_plan tools and session management
AI Security Review
scanned 3h ago · by lpm-firewall-aiThe package presents a coding-agent CLI and library, has no lifecycle scripts, and its inspected gist flow runs only as an interactive sharing action that creates a private gist. The credential host pointers resolve to CLI help text listing supported provider environment variables, not code sending those credentials to GitHub.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; session sharing runs when the user requests it in interactive mode.
Impact
No malicious impact identified from the inspected source.
Mechanism
The sharing flow invokes GitHub CLI to create a private gist from a temporary session export. No automatic credential collection or unrelated transmission was found in the inspected flow.
AI rationale
The package presents a coding-agent CLI and library, has no lifecycle scripts, and its inspected gist flow runs only as an interactive sharing action that creates a private gist. The credential host pointers resolve to CLI help text listing supported provider environment variables, not code sending those credentials to GitHub.
Network endpoints1
gist.github.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares a CLI and library entry points, with no lifecycle scripts.
- The library entry point re-exports APIs; the CLI starts the coding agent when invoked.
- The gist flow runs `gh gist create` with `--public=false` as an interactive sharing action.
- The CLI documents provider credentials as environment variables; the inspected gist flow does not collect or transmit them.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
8 flaggeddist/core/extensions/loader.jsView file
49};
L50: const require = createRequire(import.meta.url);
L51: const isTypeScriptSourceRuntime = !isBunBinary && path.extname(fileURLToPath(import.meta.url)) === ".ts";
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/core/extensions/loader.jsView on unpkg · L49dist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView file
•path = dist/node_modules/@diffexai/diffex-[redacted]-x64/darwin-modifiers.node
kind = native_binary
sizeBytes = 12776
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView on unpkgFindings
6 High5 Medium3 Low
HighSemantic Analysis Limiteddist/config.js#virtual:string-array:round1
HighKnown Malware Source Similaritydist/utils/shell.js
HighKnown Malware Source Similaritydist/core/resolve-config-value.js
HighKnown Malware Source Similaritydist/modes/rpc/rpc-client.js
HighKnown Malware Source Similaritydist/utils/clipboard.js
HighPrevious Version Dangerous Deltadist/core/tools/subagents.js
MediumDynamic Requiredist/core/extensions/loader.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.node
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to @diffexai/diffex@0.2.5.
See all versions of @diffexai/diffex for other recorded verdicts.
- Review the evidence and your use of @diffexai/diffex@0.2.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.