@minimax-ai/code@0.4.5
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malicious behavior was established, but opaque binary data and incomplete static coverage prevent a clean verdict. Warn rather than block because the inspected lifecycle behavior is package-aligned.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm installation triggers the postinstall verifier.
Impact
No confirmed data theft, persistence, or destructive action; incomplete inspection leaves residual supply-chain risk.
Mechanism
Local native-module verification with an opaque bundled data artifact.
AI rationale
No concrete malicious behavior was established, but opaque binary data and incomplete static coverage prevent a clean verdict. Warn rather than block because the inspected lifecycle behavior is package-aligned.
Evidence
package.jsonverify-native-install.mjsassets/models-dev-catalog.json.gzassets/skills/pdf/scripts/render_html.cjschunks/chunk-NF72FWAW.jschunks/chunk-TRPB3GW5.jschunks/launcher-2GOTCBNH.jschunks/chunk-OJA2IAQ6.jschunks/chunk-NP5G53PV.js
Decision evidence
public snapshotAI called this Suspicious at 68.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The manifest automatically runs a native-install verifier after installation.
- The package includes an opaque compressed catalog artifact that could not be safely source-cited or fully assessed as text.
- The packaged application is large and contains bundled command, network, and environment-handling code, so static coverage is incomplete.
Evidence against
- The postinstall hook invokes a local verifier rather than a downloader or shell installer.
- The verifier loads optional SQLite and runs an in-memory query; no source-inspected exfiltration or project-wide configuration mutation was found.
- The inspected PDF helper launches Playwright only when explicitly run, not during package installation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-NF72FWAW.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as p}from"./chunk-4NX3LPKA.js";import{e as g,k as d,m as h}from"./chunk-AAJMOWWM.js";import{isAbsolute as f,resolve as A}from"node:path";import{spawn as E}from"node:child_...
High
Child Process
Package source references child process execution.
chunks/chunk-NF72FWAW.jsView on unpkg · L11import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as p}from"./chunk-4NX3LPKA.js";import{e as g,k as d,m as h}from"./chunk-AAJMOWWM.js";import{isAbsolute as f,resolve as A}from"node:path";import{spawn as E}from"node:child_...
Findings
2 Critical14 High9 Medium7 Low
CriticalBrowser Credential Phishingchunks/chunk-OJA2IAQ6.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-OJA2IAQ6.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-NF72FWAW.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-TRPB3GW5.js
HighCredential Redirect Persistencechunks/launcher-2GOTCBNH.js
HighCommand Output Exfiltrationchunks/chunk-TRPB3GW5.js
HighSandbox Evasion Gated Capabilitychunks/chunk-NF72FWAW.js
HighCloud Metadata Accesschunks/chunk-TRPB3GW5.js
HighRemote Agent Bridgechunks/chunk-OJA2IAQ6.js
Affected versions and remediation
This report applies to @minimax-ai/code@0.4.5.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.4.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.