@minimax-ai/code@0.3.2
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe install hook is limited to checking better-sqlite3, but reviewer-directed package text is manipulation evidence under policy. No concrete automatic malware chain was found.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs functionality that loads the bundled code-review prompt.
Impact
Could influence an agentic code-review workflow that consumes the asset.
Mechanism
Bundled reviewer-directed instruction text.
AI rationale
The install hook is limited to checking better-sqlite3, but reviewer-directed package text is manipulation evidence under policy. No concrete automatic malware chain was found.
Evidence
assets/prompts/code-review/reviewer-system.md
Decision evidence
public snapshotAI called this Suspicious at 65.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package includes a prompt directed at code reviewers that tells them repository content cannot override it; policy treats reviewer-directed package text as manipulation evidence.
Evidence against
- The only install hook runs a native SQLite compatibility check and does not download code, alter project files, or contact a network service.
- No runtime self-dependency is declared.
- The compressed catalog is a model-data snapshot, not an executable payload.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings
Source & flagged code
19 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-OYVCWRBD.jsView file
8const path = require('node:path');
L9: const cp = require('node:child_process');
L10: const crypto = require('node:crypto');
High
Child Process
Package source references child process execution.
chunks/chunk-OYVCWRBD.jsView on unpkg · L81Cross-file remote execution chain: chunks/chunk-OYVCWRBD.js spawns chunks/chunk-O6RIRKRN.js; helper contains network access plus dynamic code execution.
L1: import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as Ue}from"./chunk-O6RIRKRN.js";import{a as B}from"./chunk-HQ2U4QVQ.js";import{e as T}from"./chunk-MMRA4VD2.js";import{e as _}from"./chunk-D76SO2ME.js";import{createPublic...
L3: `,{mode:384}),T(()=>fe(n,r))}function z(e){ge(e,{recursive:!0,force:!0,maxRetries:4,retryDelay:50})}function rt(e){let t=m.join(e,"current");if(U(t))return A(t,"utf8").trim()||void...
L4: `,{flag:"wx",mode:384}),!0}catch(i){if(i.code!=="EEXIST")throw i}let o=Te(e);if
Findings
1 Critical11 High10 Medium6 Low
CriticalPrevious Version Dangerous Deltachunks/main-LHJR7CNP.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-OYVCWRBD.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-FOS6CXFW.js
HighCredential Redirect Persistencechunks/launcher-BZUOAHBT.js
HighCommand Output Exfiltrationchunks/pdfjs-XFA6EEF2.js
HighCloud Metadata Accesschunks/chunk-FOS6CXFW.js
HighCross File Remote Execution Contextchunks/chunk-OYVCWRBD.js
HighRuntime Package Installassets/skills/pdf/scripts/render_html.cjs
HighShips High Entropy Blob
Affected versions and remediation
This report applies to @minimax-ai/code@0.3.2.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.3.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.