registry / @diffexai/diffex / 0.2.6
@diffexai/diffex@0.2.6
Coding agent CLI with read, bash, edit, write, update_plan tools and session management
AI Security Review
scanned 3h ago · by lpm-firewall-aiThe reviewed credential-to-gist pointers are help text and a configurable share URL; the actual sharing flow is explicitly user-triggered and creates a private gist. Package metadata shows CLI and library entry points without install lifecycle scripts.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The user enters `/share` in the interactive CLI.
Impact
The user can share a session as a private GitHub gist; no automatic credential exfiltration or unrelated account action was identified.
Mechanism
The command exports the session to a temporary HTML file and invokes `gh gist create --public=false` with that file.
AI rationale
The reviewed credential-to-gist pointers are help text and a configurable share URL; the actual sharing flow is explicitly user-triggered and creates a private gist. Package metadata shows CLI and library entry points without install lifecycle scripts.
Evidence
session.html
Network endpoints1
gist.github.com
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a coding-agent CLI and library entry points, with no install lifecycle scripts in package.json.
- The GitHub sharing flow runs only when the user enters `/share`; it exports the session to HTML and creates a private gist using the GitHub CLI.
- The added `spawn_agent` tool is a documented coding-agent delegation feature.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView file
•path = dist/node_modules/@diffexai/diffex-[redacted]-x64/darwin-modifiers.node
kind = native_binary
sizeBytes = 12776
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView on unpkgdist/config.js#virtual:string-array:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/config.js#virtual:string-array:round1View on unpkgFindings
6 High4 Medium3 Low
HighSemantic Analysis Limiteddist/config.js#virtual:string-array:round1
HighKnown Malware Source Similaritydist/utils/shell.js
HighKnown Malware Source Similaritydist/core/resolve-config-value.js
HighKnown Malware Source Similaritydist/modes/rpc/rpc-client.js
HighKnown Malware Source Similaritydist/utils/clipboard.js
HighPrevious Version Dangerous Deltadist/core/tools/subagents.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.node
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @diffexai/diffex@0.2.6.
See all versions of @diffexai/diffex for other recorded verdicts.
- Review the evidence and your use of @diffexai/diffex@0.2.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.