registry / @diffexai/diffex / 0.2.7
@diffexai/diffex@0.2.7
Coding agent CLI with read, bash, edit, write, update_plan tools and session management
AI Security Review
scanned 3h ago · by lpm-firewall-aiThe package is a coding-agent CLI and library with no manifest lifecycle scripts. The apparent gist credential flow is session sharing initiated from the interactive mode and uses GitHub CLI to create a private gist; no automatic credential forwarding was found.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The CLI runs when launched; session sharing requires an interactive share command, and subagent creation requires a tool call.
Impact
No automatic credential theft, unrelated data collection, or concealed execution was found in the inspected paths.
Mechanism
Session sharing exports the session to a temporary HTML file and invokes `gh gist create --public=false`. Configured command values can execute through a shell when resolved.
AI rationale
The package is a coding-agent CLI and library with no manifest lifecycle scripts. The apparent gist credential flow is session sharing initiated from the interactive mode and uses GitHub CLI to create a private gist; no automatic credential forwarding was found.
Evidence
dist/modes/interactive/interactive-mode.jsdist/core/tools/subagents.jsdist/core/resolve-config-value.js
Network endpoints1
gist.github.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a coding-agent CLI and library entry points.
- Session sharing runs only through an interactive share action, exports the session, then asks GitHub CLI to create a private gist.
- The added subagent tool starts a child only when invoked and with a supplied task.
- Shell commands in config values are explicitly configured values resolved for API keys or headers.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView file
•path = dist/node_modules/@diffexai/diffex-[redacted]-x64/darwin-modifiers.node
kind = native_binary
sizeBytes = 12776
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView on unpkgdist/config.js#virtual:string-array:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/config.js#virtual:string-array:round1View on unpkgFindings
6 High4 Medium3 Low
HighSemantic Analysis Limiteddist/config.js#virtual:string-array:round1
HighKnown Malware Source Similaritydist/utils/shell.js
HighKnown Malware Source Similaritydist/core/resolve-config-value.js
HighKnown Malware Source Similaritydist/modes/rpc/rpc-client.js
HighKnown Malware Source Similaritydist/utils/clipboard.js
HighPrevious Version Dangerous Deltadist/core/tools/subagents.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.node
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @diffexai/diffex@0.2.7.
See all versions of @diffexai/diffex for other recorded verdicts.
- Review the evidence and your use of @diffexai/diffex@0.2.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.