registry / @diffexai/diffex / 0.3.3
@diffexai/diffex@0.3.3
⚠ Under reviewCoding agent CLI with read, bash, edit, write, update_plan tools and session management
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe reviewed JavaScript associates the native add-ons with terminal input handling, but offline analysis does not resolve all shipped binaries. No attack is established; the unresolved executable behavior requires manual review.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The TUI attempts to load a helper on supported Darwin or Windows architectures; the Windows terminal path calls its virtual-terminal input function.
Impact
The effects of the unresolved native code cannot be determined from this inspection.
Mechanism
The JavaScript selects and requires bundled native add-ons, but the available analysis does not fully resolve their behavior.
AI rationale
The reviewed JavaScript associates the native add-ons with terminal input handling, but offline analysis does not resolve all shipped binaries. No attack is established; the unresolved executable behavior requires manual review.
Evidence
dist/node_modules/@diffexai/diffex-tui/dist/native-modifiers.jsdist/node_modules/@diffexai/diffex-tui/dist/terminal.js.lpm-inspection-0qqZ2X/0-0e51e550acf5.txt.lpm-inspection-0qqZ2X/1-7657cd6bd999.txt.lpm-inspection-0qqZ2X/2-5bc2f926c6a6.txt.lpm-inspection-0qqZ2X/3-e40df72050ed.txtdist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodedist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-arm64/darwin-modifiers.nodedist/node_modules/@diffexai/diffex-tui/native/win32/prebuilds/win32-arm64/win32-console-mode.nodedist/node_modules/@diffexai/diffex-tui/native/win32/prebuilds/win32-x64/win32-console-mode.node
Decision evidence
public snapshotAI called this Manual Review at 98.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The TUI dynamically loads platform-specific native helpers for supported architectures.
- The native analysis leaves both Darwin add-ons unresolved, cannot analyze the Windows ARM add-on, and reports an unmapped target in the Windows x64 add-on.
- The Windows TUI calls the native helper to enable virtual-terminal input.
Evidence against
- The inspected Windows TUI call site uses the helper for terminal input handling; this does not resolve the helpers' complete behavior.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView file
•path = dist/node_modules/@diffexai/diffex-[redacted]-x64/darwin-modifiers.node
kind = native_binary
sizeBytes = 12776
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.nodeView on unpkgdist/config.js#virtual:string-array:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/config.js#virtual:string-array:round1View on unpkgFindings
5 High4 Medium3 Low
HighSemantic Analysis Limiteddist/config.js#virtual:string-array:round1
HighKnown Malware Source Similaritydist/core/resolve-config-value.js
HighKnown Malware Source Similaritydist/modes/rpc/rpc-client.js
HighKnown Malware Source Similaritydist/utils/clipboard.js
HighPrevious Version Dangerous Deltadist/utils/shell.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/node_modules/@diffexai/diffex-tui/native/darwin/prebuilds/darwin-x64/darwin-modifiers.node
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @diffexai/diffex@0.3.3.
See all versions of @diffexai/diffex for other recorded verdicts.
- Review the evidence and your use of @diffexai/diffex@0.3.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.