@minimax-ai/code@0.3.8
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe visible install hook appears package-aligned, but opaque compressed and native artifacts prevent complete static source assessment. This warrants a warning rather than a block because no concrete attack chain was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm installation runs postinstall.
Impact
No confirmed harmful impact; opaque artifacts leave residual supply-chain uncertainty.
Mechanism
Automatic native SQLite verification with opaque bundled artifacts.
AI rationale
The visible install hook appears package-aligned, but opaque compressed and native artifacts prevent complete static source assessment. This warrants a warning rather than a block because no concrete attack chain was found.
Evidence
package.jsonverify-native-install.mjsconfigs/models-dev-catalog.json.gz
Decision evidence
public snapshotAI called this Suspicious at 72.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Installation automatically runs a package script.
- The package ships an opaque compressed model catalog that could not be source-inspected as text.
- The install script loads an optional native SQLite dependency, increasing opaque native-code exposure.
Evidence against
- The postinstall source performs a local compatibility and SQLite smoke check rather than downloading or executing a remote payload.
- No source-inspected evidence showed credential collection, exfiltration, destructive actions, self-dependency, or agent-control-surface writes.
- The command entry points run only when the user invokes the package CLI.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
18 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-NP5G53PV.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as P}from"./chunk-YPMJNO4T.js";import{execFile as R,spawnSync as _}from"node:child_process";import{chmod as F,copyFile as M,mkdtemp as C,readFile as O,rm as I,stat as L,wr...
L3: ObjC.import('AppKit');
High
Child Process
Package source references child process execution.
chunks/chunk-NP5G53PV.jsView on unpkg · L1assets/skills/pdf/scripts/render_html.cjsView file
Findings
11 High10 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-NP5G53PV.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-FOS6CXFW.js
HighCredential Redirect Persistencechunks/launcher-OZHJWAUU.js
HighCommand Output Exfiltrationchunks/pdfjs-XFA6EEF2.js
HighCloud Metadata Accesschunks/chunk-FOS6CXFW.js
HighCross File Remote Execution Contextchunks/main-F7JZ3TVA.js
HighRuntime Package Installassets/skills/pdf/scripts/render_html.cjs
HighShips High Entropy Blobconfigs/models-dev-catalog.json.gz
HighSemantic Analysis Limitedchunks/chunk-NP5G53PV.js#virtual:normalized:round1
Affected versions and remediation
This report applies to @minimax-ai/code@0.3.8.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.3.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.