registry / @minimax-ai/code / 0.3.10
@minimax-ai/code@0.3.10
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo inspected source establishes theft, remote payload execution, persistence, or destructive behavior. Downgrade to warning because an opaque compressed artifact prevents complete static coverage.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm installation, or explicit execution of the PDF rendering utility
Impact
No confirmed malicious impact; opaque compressed content leaves residual supply-chain uncertainty.
Mechanism
Postinstall native verification and user-invoked browser installation
AI rationale
No inspected source establishes theft, remote payload execution, persistence, or destructive behavior. Downgrade to warning because an opaque compressed artifact prevents complete static coverage.
Evidence
configs/models-dev-catalog.json.gzverify-native-install.mjsassets/skills/pdf/scripts/render_html.cjs
Decision evidence
public snapshotAI called this Suspicious at 68.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Installation automatically runs a native SQLite verification script.
- A bundled PDF renderer can use shell-enabled npx to install Chromium when that renderer is run.
- The compressed model catalog cannot be fully source-audited as UTF-8 text.
Evidence against
- The install hook is limited to loading better-sqlite3 and performing an in-memory SQLite check.
- The manifest has no dependency on another release of this package.
- No source-confirmed credential exfiltration, destructive action, or foreign AI-agent configuration mutation was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings
Source & flagged code
18 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/launcher-CVR77P3I.jsView file
9`],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function qv(n){let e=n[0]==="u",t=n[1]==="{";return e&&!t&&n.length===5|...
L10: `);return r!==-1&&(e=C4(e,s,i,r)),i+e+s},Am,Gv=(n,...e)=>{let[t]=e;if(!Rl(t)||!Rl(t.raw))return e.join(" ");let i=e.slice(1),s=[t.raw[0]];for(let r=1;r<t.length;r++)s.push(String(i...
L11: ]`).replace("lheading",Yg).replace("|table","").replace("blockquote"," {0,3}>").replace("|fences","").replace("|list","").replace("|html","").replace("|tag","").getRegex()},VE=/^\\...
High
Child Process
Package source references child process execution.
chunks/launcher-CVR77P3I.jsView on unpkg · L9•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
chunks/launcher-CVR77P3I.js:
`);Kn.mkdirSync(Zi.dirname(Me),{recursive:!0}),Kn.writeFileSync(Me,ce),this.stop();let Z=[`Rendered line ${O} exceeds terminal width (${v(B)} > ${e}).`,"","This is likely caused by...
`);Kn.writeFileSync(B,G)}P.flush(),this.cursorRow=Math.max(0,d.length-1),this.hardwareCursorRow=W,this.maxLinesRendered=Math.max(this.maxLinesRendered,d.length),this.previousViewpo...
`;try{NR(s,r,{encoding:"utf8",mode:384}),LR(s,t)}catch(o){try{OR(s)}catch{}throw o instanceof Error?o:new Error(String(o))}return t}function FR(n){return Object.fromEntries(Object....
Check the selected provider API key and endpoint, then resend
Findings
11 High10 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/launcher-CVR77P3I.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-FOS6CXFW.js
HighCredential Redirect Persistencechunks/launcher-CVR77P3I.js
HighCommand Output Exfiltrationchunks/pdfjs-XFA6EEF2.js
HighCloud Metadata Accesschunks/chunk-FOS6CXFW.js
HighCross File Remote Execution Contextchunks/main-2DGSNE4M.js
HighRuntime Package Installassets/skills/pdf/scripts/render_html.cjs
HighShips High Entropy Blobconfigs/models-dev-catalog.json.gz
HighSemantic Analysis Limitedchunks/chunk-NP5G53PV.js#virtual:normalized:round1
Affected versions and remediation
This report applies to @minimax-ai/code@0.3.10.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.3.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.