@minimax-ai/code@0.3.11
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiReadable code does not show credential theft, exfiltration, remote payload execution, broad configuration mutation, or a self-dependent lifecycle chain. However, opaque artifacts and incomplete static coverage rule out a clean verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Package installation for the check, or explicit execution of the PDF helper.
Impact
Opaque shipped artifacts prevent a clean source-only determination.
Mechanism
Postinstall native-module verification and user-invoked browser setup.
AI rationale
Readable code does not show credential theft, exfiltration, remote payload execution, broad configuration mutation, or a self-dependent lifecycle chain. However, opaque artifacts and incomplete static coverage rule out a clean verdict.
Evidence
package.jsonverify-native-install.mjsassets/skills/pdf/scripts/render_html.cjs
Decision evidence
public snapshotAI called this Suspicious at 71.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Installation automatically runs a package script.
- The install script loads a native SQLite dependency.
- A bundled PDF helper can invoke npm to install Chromium when the helper is explicitly run.
- A compressed model catalogue, native addon, and WebAssembly module remain opaque to complete source-level review.
Evidence against
- The postinstall target performs a local SQLite compatibility check and contains no network request code.
- There is no self-dependency on this package name in package.json.
- The PDF helper is not referenced by the install hook and requires explicit execution.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
20 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/launcher-6OPLN32C.jsView file
9`],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function qv(n){let e=n[0]==="u",t=n[1]==="{";return e&&!t&&n.length===5|...
L10: `);return r!==-1&&(e=C4(e,s,i,r)),i+e+s},Am,Gv=(n,...e)=>{let[t]=e;if(!Rl(t)||!Rl(t.raw))return e.join(" ");let i=e.slice(1),s=[t.raw[0]];for(let r=1;r<t.length;r++)s.push(String(i...
L11: ]`).replace("lheading",Yg).replace("|table","").replace("blockquote"," {0,3}>").replace("|fences","").replace("|list","").replace("|html","").replace("|tag","").getRegex()},VE=/^\\...
High
Child Process
Package source references child process execution.
chunks/launcher-6OPLN32C.jsView on unpkg · L9•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
chunks/launcher-6OPLN32C.js:
`);Kn.mkdirSync(Zi.dirname(Me),{recursive:!0}),Kn.writeFileSync(Me,ce),this.stop();let Z=[`Rendered line ${O} exceeds terminal width (${v(B)} > ${e}).`,"","This is likely caused by...
`);Kn.writeFileSync(B,G)}P.flush(),this.cursorRow=Math.max(0,d.length-1),this.hardwareCursorRow=W,this.maxLinesRendered=Math.max(this.maxLinesRendered,d.length),this.previousViewpo...
`;try{NR(s,r,{encoding:"utf8",mode:384}),LR(s,t)}catch(o){try{OR(s)}catch{}throw o instanceof Error?o:new Error(String(o))}return t}function FR(n){return Object.fromEntries(Object....
Check the selected provider API key and endpoint, then resend
Findings
1 Critical12 High9 Medium6 Low
CriticalPrevious Version Dangerous Deltachunks/chunk-XO2KLR35.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/launcher-6OPLN32C.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-FOS6CXFW.js
HighCredential Redirect Persistencechunks/launcher-6OPLN32C.js
HighCommand Output Exfiltrationchunks/pdfjs-XFA6EEF2.js
HighSandbox Evasion Gated Capabilitychunks/chunk-4S3IXX3N.js
HighCloud Metadata Accesschunks/chunk-FOS6CXFW.js
HighCross File Remote Execution Contextchunks/main-SEFSP27Y.js
HighRuntime Package Install
Affected versions and remediation
This report applies to @minimax-ai/code@0.3.11.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.3.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.