registry / @minimax-ai/code / 0.3.6
@minimax-ai/code@0.3.6
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe visible lifecycle code is consistent with a native compatibility check, not a concrete malicious chain. Incomplete inspectability of executable artifacts and automatic installation execution warrants a warning rather than a clean decision.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
npm installation runs the postinstall verifier; CLI helper features require explicit user invocation.
Impact
Unresolved supply-chain risk from uninspectable artifacts; no confirmed exfiltration, persistence, or destructive action.
Mechanism
Postinstall native-dependency verification with bundled native runtime components.
AI rationale
The visible lifecycle code is consistent with a native compatibility check, not a concrete malicious chain. Incomplete inspectability of executable artifacts and automatic installation execution warrants a warning rather than a clean decision.
Evidence
package.jsonverify-native-install.mjschunks/launcher-FVXKFL4F.jsnative/darwin/prebuilds/darwin-x64/darwin-modifiers.nodephoton_rs_bg.wasmconfigs/models-dev-catalog.json.gz
Decision evidence
public snapshotAI called this Suspicious at 72.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package runs a postinstall program and ships opaque native, WebAssembly, and compressed artifacts that cannot be fully source-reviewed.
- Bundled CLI code can launch external programs and includes update and plugin-management capabilities.
- A bundled PDF helper can invoke npm and install Chromium with a shell-enabled child process when the helper is explicitly used.
Evidence against
- The postinstall source performs a local better-sqlite3 in-memory smoke test and reports compatibility failures.
- No runtime dependency on this package's own name appears in package.json.
- The inspected install hook contains no network request, project-file write, credential collection, or agent-control-surface mutation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
Source & flagged code
19 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-G7PNCKMS.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as p}from"./chunk-ISF4HEC4.js";import{e as h,i as d,k as g}from"./chunk-J63OB7U2.js";import{isAbsolute as M,resolve as f}from"node:path";import{spawn as A}from"node:child_...
High
Child Process
Package source references child process execution.
chunks/chunk-G7PNCKMS.jsView on unpkg · L1assets/skills/pdf/scripts/render_html.cjsView file
Findings
1 Critical11 High10 Medium6 Low
CriticalPrevious Version Dangerous Deltachunks/chunk-KXO2REWJ.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-G7PNCKMS.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-FOS6CXFW.js
HighCredential Redirect Persistencechunks/launcher-FVXKFL4F.js
HighCommand Output Exfiltrationchunks/pdfjs-XFA6EEF2.js
HighCloud Metadata Accesschunks/chunk-FOS6CXFW.js
HighCross File Remote Execution Contextchunks/main-5I5LJBKT.js
HighRuntime Package Installassets/skills/pdf/scripts/render_html.cjs
HighShips High Entropy Blob
Affected versions and remediation
This report applies to @minimax-ai/code@0.3.6.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.3.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.