registry / @minimax-ai/code / 0.4.0
@minimax-ai/code@0.4.0
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiStatic inspection does not substantiate malicious behavior, but complete clean verification is not possible for the opaque artifact and large generated bundles. Downgrade to a warning rather than block publication.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Installing the package runs the verifier; explicitly running the PDF helper can trigger Playwright setup.
Impact
Incomplete coverage of generated and binary artifacts leaves residual supply-chain risk.
Mechanism
Lifecycle native-module verification and user-invoked browser setup.
AI rationale
Static inspection does not substantiate malicious behavior, but complete clean verification is not possible for the opaque artifact and large generated bundles. Downgrade to a warning rather than block publication.
Evidence
verify-native-install.mjsassets/skills/pdf/scripts/render_html.cjs
Decision evidence
public snapshotAI called this Suspicious at 71.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The manifest runs a postinstall hook automatically.
- A bundled PDF helper can invoke global npm lookup and a shell-enabled Playwright installation when the helper is run.
- Six required generated chunks are minified into extremely large single lines, preventing complete source-level behavioural coverage.
- The package ships an opaque gzip model catalog that cannot be safely represented as a source citation.
Evidence against
- The postinstall target is a native SQLite compatibility check; it has no self-dependency.
- Inspection found no confirmed install-time network request, credential collection, exfiltration, or foreign agent-control-surface mutation.
- The PDF helper is an explicit user-invoked utility rather than a lifecycle target.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
Source & flagged code
22 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-NF72FWAW.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as p}from"./chunk-4NX3LPKA.js";import{e as g,k as d,m as h}from"./chunk-AAJMOWWM.js";import{isAbsolute as f,resolve as A}from"node:path";import{spawn as E}from"node:child_...
High
Child Process
Package source references child process execution.
chunks/chunk-NF72FWAW.jsView on unpkg · L1assets/skills/pdf/scripts/render_html.cjsView file
Findings
1 Critical13 High10 Medium7 Low
CriticalPrevious Version Dangerous Deltachunks/chunk-6BYKHQOV.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-NF72FWAW.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-TRPB3GW5.js
HighCredential Redirect Persistencechunks/launcher-A64GFJG2.js
HighCommand Output Exfiltrationchunks/chunk-TRPB3GW5.js
HighCloud Metadata Accesschunks/chunk-TRPB3GW5.js
HighRemote Agent Bridgechunks/chunk-ORVAHBJL.js
HighCross File Remote Execution Contextchunks/chunk-ORVAHBJL.js
HighTrigger Reachable Command Output Exfiltration
Affected versions and remediation
This report applies to @minimax-ai/code@0.4.0.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.4.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.