registry / @minimax-ai/code / 0.3.7
@minimax-ai/code@0.3.7
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo source-established credential theft, covert exfiltration, destructive action, or malicious lifecycle chain was found. Downgrade to warning because executable update, network, shell-install, and opaque-artifact capabilities remain unresolved in a package whose required clean coverage cannot be completed.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Running the MCode CLI or explicitly invoking the bundled PDF renderer.
Impact
The package can make a network request and write runtime cache or update files; the large bundled and compressed artifacts leave residual static-analysis uncertainty.
Mechanism
Runtime catalog refresh, update staging, and user-invoked Playwright installation.
AI rationale
No source-established credential theft, covert exfiltration, destructive action, or malicious lifecycle chain was found. Downgrade to warning because executable update, network, shell-install, and opaque-artifact capabilities remain unresolved in a package whose required clean coverage cannot be completed.
Evidence
chunks/launcher-N4XF6G4T.jsassets/skills/pdf/scripts/render_html.cjschunks/chunk-WMOPXI4T.jsconfigs/models-dev-catalog.json.gz
Network endpoints1
models.dev
Decision evidence
public snapshotAI called this Suspicious at 72.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package installs a lifecycle verifier that loads the optional native SQLite dependency.
- The runtime bundle reads a compressed catalog, fetches an updated model catalog from models.dev, and writes a cached copy.
- A bundled PDF helper can run npm and npx with a shell to install Chromium when a user invokes that helper.
- The runtime includes an updater that stages and writes versioned package installations.
Evidence against
- The manifest has no dependency on another release of itself.
- The postinstall source performs a local in-memory SQLite smoke test and reports failures; no network request or project mutation is shown there.
- The PDF helper requires explicit command-line input and is not referenced by the install hook.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
Source & flagged code
19 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-RXHPXCVW.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as p}from"./chunk-ACTS7L64.js";import{e as h,j as d,l as g}from"./chunk-SEVVS6ZS.js";import{isAbsolute as M,resolve as f}from"node:path";import{spawn as A}from"node:child_...
High
Child Process
Package source references child process execution.
chunks/chunk-RXHPXCVW.jsView on unpkg · L1assets/skills/pdf/scripts/render_html.cjsView file
Findings
1 Critical11 High10 Medium6 Low
CriticalPrevious Version Dangerous Deltachunks/chunk-WMOPXI4T.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-RXHPXCVW.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-FOS6CXFW.js
HighCredential Redirect Persistencechunks/launcher-N4XF6G4T.js
HighCommand Output Exfiltrationchunks/pdfjs-XFA6EEF2.js
HighCloud Metadata Accesschunks/chunk-FOS6CXFW.js
HighCross File Remote Execution Contextchunks/main-LM42U7RA.js
HighRuntime Package Installassets/skills/pdf/scripts/render_html.cjs
HighShips High Entropy Blob
Affected versions and remediation
This report applies to @minimax-ai/code@0.3.7.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.3.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.