@minimax-ai/code@0.3.9
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe inspected source does not establish malicious behavior, but complete static coverage is blocked by the opaque compressed catalog and large generated artifacts. Downgrade to a warning rather than treating the package as clean.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Package installation runs the native verifier; the PDF helper runs only when explicitly executed.
Impact
No concrete harmful effect was demonstrated; opaque packaged data prevents a clean verdict.
Mechanism
Install-time native dependency verification and user-invoked browser setup.
AI rationale
The inspected source does not establish malicious behavior, but complete static coverage is blocked by the opaque compressed catalog and large generated artifacts. Downgrade to a warning rather than treating the package as clean.
Evidence
package.jsonconfigs/models-dev-catalog.json.gzverify-native-install.mjsassets/skills/pdf/scripts/render_html.cjs
Decision evidence
public snapshotAI called this Suspicious at 72.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Installation runs a verifier, and the package ships a compressed configuration catalog that cannot be meaningfully source-audited.
- An explicit PDF rendering helper can invoke npm and npx to install Chromium.
Evidence against
- The postinstall hook only starts the local verifier; its source performs an in-memory SQLite smoke test.
- No self-dependency, credential theft, exfiltration, destructive action, or agent-control-surface mutation was found in the inspected entrypoints.
- The npm and npx invocation is in a user-run PDF helper, not the install hook.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetry
Source & flagged code
18 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/launcher-CRWDSPMP.jsView file
9`],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function qv(n){let e=n[0]==="u",t=n[1]==="{";return e&&!t&&n.length===5|...
L10: `);return r!==-1&&(e=x4(e,s,i,r)),i+e+s},Am,Gv=(n,...e)=>{let[t]=e;if(!Rl(t)||!Rl(t.raw))return e.join(" ");let i=e.slice(1),s=[t.raw[0]];for(let r=1;r<t.length;r++)s.push(String(i...
L11: ]`).replace("lheading",Yg).replace("|table","").replace("blockquote"," {0,3}>").replace("|fences","").replace("|list","").replace("|html","").replace("|tag","").getRegex()},GE=/^\\...
High
Child Process
Package source references child process execution.
chunks/launcher-CRWDSPMP.jsView on unpkg · L9•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
chunks/launcher-CRWDSPMP.js:
`);Kn.mkdirSync(Zi.dirname(Me),{recursive:!0}),Kn.writeFileSync(Me,ce),this.stop();let Z=[`Rendered line ${O} exceeds terminal width (${v(B)} > ${e}).`,"","This is likely caused by...
`);Kn.writeFileSync(B,G)}P.flush(),this.cursorRow=Math.max(0,d.length-1),this.hardwareCursorRow=W,this.maxLinesRendered=Math.max(this.maxLinesRendered,d.length),this.previousViewpo...
`;try{DR(s,r,{encoding:"utf8",mode:384}),OR(s,t)}catch(o){try{NR(s)}catch{}throw o instanceof Error?o:new Error(String(o))}return t}function $R(n){return Object.fromEntries(Object....
Check the selected provider API key and endpoint, then resend
Findings
11 High10 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/launcher-CRWDSPMP.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-FOS6CXFW.js
HighCredential Redirect Persistencechunks/launcher-CRWDSPMP.js
HighCommand Output Exfiltrationchunks/pdfjs-XFA6EEF2.js
HighCloud Metadata Accesschunks/chunk-FOS6CXFW.js
HighCross File Remote Execution Contextchunks/main-I2GTN2NG.js
HighRuntime Package Installassets/skills/pdf/scripts/render_html.cjs
HighShips High Entropy Blobconfigs/models-dev-catalog.json.gz
HighSemantic Analysis Limitedchunks/chunk-NP5G53PV.js#virtual:normalized:round1
Affected versions and remediation
This report applies to @minimax-ai/code@0.3.9.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.3.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.