registry / @minimax-ai/code / 0.3.1
@minimax-ai/code@0.3.1
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malicious lifecycle behavior or exfiltration was found in the inspected source. The privileged updater and user-invoked installer capabilities warrant a warning until their release-channel controls are independently assessed.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
An MCode update operation activates the bundled updater.
Impact
A compromised or incorrectly trusted release channel could alter the user's global MCode installation.
Mechanism
Download, verify, and globally install a staged MCode release.
AI rationale
No concrete malicious lifecycle behavior or exfiltration was found in the inspected source. The privileged updater and user-invoked installer capabilities warrant a warning until their release-channel controls are independently assessed.
Evidence
chunks/chunk-AOZUEPXI.js
Network endpoints1
algeng-ali-shanghai-agent-02.oss-cn-shanghai.aliyuncs.com
Decision evidence
public snapshotAI called this Suspicious at 68.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package has a postinstall hook that executes a Node script.
- A bundled updater downloads release artifacts and installs them globally into a staged prefix.
- A PDF helper invokes shell tooling and can install Chromium when that helper is run.
- Bundled code contains cloud metadata endpoint support and local configuration writes.
- The bundled PDF engine enables Function-based compilation for PDF content.
Evidence against
- The postinstall script only verifies that the optional SQLite dependency loads and performs an in-memory query.
- No inspected lifecycle code downloads payloads, changes agent configuration, or exfiltrates files or environment variables.
- The updater validates artifact size and SHA-256 before installation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
Source & flagged code
19 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-PGOU6MFH.jsView file
2import{e as Xn}from"./chunk-MMRA4VD2.js";import{a as ae,c as W,e as Sa}from"./chunk-D76SO2ME.js";var Uo=W((Zd,Do)=>{var de=ae("constants"),Bc=process.cwd,Nn=null,jc=process.env.GRA...
L3: GFS4: `),console.error(e)});C[$]||(Ko=global[$]||[],Ho(C,Ko),C.close=(function(e){function n(r,i){return e.call(C,r,function(t){t||Yo(),typeof i=="function"&&i.apply(this,arguments...
L4:
High
Child Process
Package source references child process execution.
chunks/chunk-PGOU6MFH.jsView on unpkg · L2assets/skills/pdf/scripts/render_html.cjsView file
Findings
1 Critical11 High10 Medium6 Low
CriticalPrevious Version Dangerous Deltachunks/chunk-AOZUEPXI.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-PGOU6MFH.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-FOS6CXFW.js
HighCredential Redirect Persistencechunks/launcher-P2FIIDHG.js
HighCommand Output Exfiltrationchunks/pdfjs-XFA6EEF2.js
HighCloud Metadata Accesschunks/chunk-FOS6CXFW.js
HighCross File Remote Execution Contextchunks/chunk-AOZUEPXI.js
HighRuntime Package Installassets/skills/pdf/scripts/render_html.cjs
HighShips High Entropy Blob
Affected versions and remediation
This report applies to @minimax-ai/code@0.3.1.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.3.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.