registry / @minimax-ai/code / 0.4.2
@minimax-ai/code@0.4.2
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe observed capabilities are user-triggered and package-aligned, but opaque and oversized artifacts prevent a source-grounded clean verdict. There is insufficient evidence of a concrete malicious chain to block publication.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the PDF helper with Chromium unavailable, or uses model-catalog features of the CLI.
Impact
The helper can download and execute the Playwright installer, while catalog requests contact model-service hosts. The compressed catalog and oversized bundles prevent a clean static conclusion.
Mechanism
User-triggered shell-enabled browser installation and remote model-catalog retrieval.
AI rationale
The observed capabilities are user-triggered and package-aligned, but opaque and oversized artifacts prevent a source-grounded clean verdict. There is insufficient evidence of a concrete malicious chain to block publication.
Evidence
assets/skills/pdf/scripts/render_html.cjschunks/chunk-VFMQBQ74.js
Network endpoints2
models.devfilecdn.minimax.chat
Decision evidence
public snapshotAI called this Suspicious at 73.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package has an automatic postinstall hook.
- A bundled PDF helper can invoke npx with shell enabled to install Chromium when manually run.
- The runtime contains remote model-catalog retrieval paths.
- A 4.3 MB compressed catalog cannot be source-inspected as text.
Evidence against
- The postinstall hook runs a native dependency verifier, not a downloader or project mutation.
- The manifest has no dependency on another release of itself.
- The PDF installer is reachable only after explicit helper execution and a failed browser launch.
- No unconsented credential exfiltration, broad agent-config mutation, or destructive install behavior was confirmed.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
25 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-NF72FWAW.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as p}from"./chunk-4NX3LPKA.js";import{e as g,k as d,m as h}from"./chunk-AAJMOWWM.js";import{isAbsolute as f,resolve as A}from"node:path";import{spawn as E}from"node:child_...
High
Child Process
Package source references child process execution.
chunks/chunk-NF72FWAW.jsView on unpkg · L11import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as p}from"./chunk-4NX3LPKA.js";import{e as g,k as d,m as h}from"./chunk-AAJMOWWM.js";import{isAbsolute as f,resolve as A}from"node:path";import{spawn as E}from"node:child_...
Findings
3 Critical14 High9 Medium7 Low
CriticalBrowser Credential Phishingchunks/chunk-OJA2IAQ6.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-OJA2IAQ6.js
CriticalPrevious Version Dangerous Deltaassets/skills/pdf/scripts/render_html.cjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-NF72FWAW.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-TRPB3GW5.js
HighCredential Redirect Persistencechunks/launcher-TUY2TFYJ.js
HighCommand Output Exfiltrationchunks/chunk-TRPB3GW5.js
HighSandbox Evasion Gated Capabilitychunks/chunk-NF72FWAW.js
High
Affected versions and remediation
This report applies to @minimax-ai/code@0.4.2.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.4.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.