registry / @minimax-ai/code / 0.4.1
@minimax-ai/code@0.4.1
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe inspected postinstall behavior is consistent with native dependency verification, not a confirmed attack. However, incomplete analysis coverage and bundled command/network capabilities prevent a source-grounded clean verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
npm installation triggers the verification script; explicit use of the PDF helper can trigger Playwright installation.
Impact
No concrete malicious action was confirmed, but incomplete inspection of bundled code prevents a clean decision.
Mechanism
Install-time native-module verification and user-invoked browser-runtime installation.
AI rationale
The inspected postinstall behavior is consistent with native dependency verification, not a confirmed attack. However, incomplete analysis coverage and bundled command/network capabilities prevent a source-grounded clean verdict.
Evidence
package.jsonverify-native-install.mjsassets/skills/pdf/scripts/render_html.cjschunks/chunk-NF72FWAW.jschunks/chunk-TRPB3GW5.jschunks/launcher-U2WCORIY.jschunks/chunk-ORVAHBJL.jschunks/chunk-OFHDMZSQ.jschunks/chunk-BFVBLLWG.js
Decision evidence
public snapshotAI called this Suspicious at 71.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package runs a postinstall program, while several very large minified bundles and a non-text compressed catalog could not be fully source-reviewed.
- A bundled PDF helper can invoke npm and npx to locate or install Playwright when the helper is explicitly run.
- The inspected bundles include child-process and network-capable code, leaving unresolved risk in the portions that could not be exhaustively analyzed.
Evidence against
- The postinstall script only verifies the optional better-sqlite3 native module with an in-memory query.
- No self-dependency or nested install lifecycle was present in package.json.
- The PDF helper requires explicit command-line input and output paths; its browser installation path is not run during npm installation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
Source & flagged code
22 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-NF72FWAW.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as p}from"./chunk-4NX3LPKA.js";import{e as g,k as d,m as h}from"./chunk-AAJMOWWM.js";import{isAbsolute as f,resolve as A}from"node:path";import{spawn as E}from"node:child_...
High
Child Process
Package source references child process execution.
chunks/chunk-NF72FWAW.jsView on unpkg · L1assets/skills/pdf/scripts/render_html.cjsView file
Findings
1 Critical13 High10 Medium7 Low
CriticalPrevious Version Dangerous Deltachunks/chunk-OFHDMZSQ.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-NF72FWAW.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-TRPB3GW5.js
HighCredential Redirect Persistencechunks/launcher-U2WCORIY.js
HighCommand Output Exfiltrationchunks/chunk-TRPB3GW5.js
HighCloud Metadata Accesschunks/chunk-TRPB3GW5.js
HighRemote Agent Bridgechunks/chunk-ORVAHBJL.js
HighCross File Remote Execution Contextchunks/chunk-ORVAHBJL.js
HighTrigger Reachable Command Output Exfiltration
Affected versions and remediation
This report applies to @minimax-ai/code@0.4.1.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.4.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.