@minimax-ai/code@0.4.6
Minimax Code — terminal coding agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiInspectable lifecycle code is package-aligned and non-destructive, but the opaque compressed artifact leaves an unresolved payload-carrier risk. Downgrade to a warning rather than block because no concrete malicious behavior was established.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Package installation runs the native SQLite check; the PDF helper runs only when explicitly invoked.
Impact
Unresolved risk remains because the compressed artifact could not be inspected as source.
Mechanism
Opaque bundled compressed data with an install-time native-module check.
AI rationale
Inspectable lifecycle code is package-aligned and non-destructive, but the opaque compressed artifact leaves an unresolved payload-carrier risk. Downgrade to a warning rather than block because no concrete malicious behavior was established.
Decision evidence
public snapshotAI called this Suspicious at 74.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- An automatic postinstall hook runs code; its visible implementation only loads better-sqlite3 and performs an in-memory query, but the release also contains an opaque compressed catalog that could not be source-reviewed.
- A bundled PDF helper can launch a shell-enabled Playwright installation command, although this occurs only when that helper is explicitly run and Chromium is unavailable.
Evidence against
- package.json has no runtime dependency on another version of this package.
- The postinstall source performs a local native-module compatibility check and does not contain network, project mutation, or agent-control-surface writes.
- The PDF helper's network-capable behavior is behind an explicit utility command, not an install hook.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
25 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/launcher-TV5PCI3Y.jsView file
9`],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function SS(n){let e=n[0]==="u",t=n[1]==="{";return e&&!t&&n.length===5|...
L10: `);return r!==-1&&(e=r_(e,s,i,r)),i+e+s},Hm,AS=(n,...e)=>{let[t]=e;if(!Nl(t)||!Nl(t.raw))return e.join(" ");let i=e.slice(1),s=[t.raw[0]];for(let r=1;r<t.length;r++)s.push(String(i...
L11: ]`).replace("lheading",Iy).replace("|table","").replace("blockquote"," {0,3}>").replace("|fences","").replace("|list","").replace("|html","").replace("|tag","").getRegex()},OA=/^\\...
High
Child Process
Package source references child process execution.
chunks/launcher-TV5PCI3Y.jsView on unpkg · L9•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
chunks/launcher-TV5PCI3Y.js:
`);Vn.mkdirSync(ls.dirname(xe),{recursive:!0}),Vn.writeFileSync(xe,ce),this.stop();let Z=[`Rendered line ${O} exceeds terminal width (${x(B)} > ${e}).`,"","This is likely caused by...
`);Vn.writeFileSync(B,z)}_.flush(),this.cursorRow=Math.max(0,c.length-1),this.hardwareCursorRow=U,this.maxLinesRendered=Math.max(this.maxLinesRendered,c.length),this.previousViewpo...
`).map(s=>h.hex(d.text)(s))}}function k_(){return{heading:n=>h.bold.hex(d.markdownHeading)(n),link:n=>h.hex(d.markdownLink)(n),linkUrl:n=>h.hex(d.dim)(n),code:n=>h.hex(d.markdownCo...
Check the selected provider API key and endpoint, then resend
Findings
3 Critical14 High9 Medium7 Low
CriticalBrowser Credential Phishingchunks/chunk-NELAOQAA.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-NELAOQAA.js
CriticalPrevious Version Dangerous Deltachunks/chunk-NELAOQAA.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/launcher-TV5PCI3Y.js
HighShellassets/skills/pdf/scripts/render_html.cjs
HighSame File Env Network Executionchunks/chunk-TRPB3GW5.js
HighCredential Redirect Persistencechunks/launcher-TV5PCI3Y.js
HighCommand Output Exfiltrationchunks/chunk-TRPB3GW5.js
HighSandbox Evasion Gated Capabilitychunks/chunk-NF72FWAW.js
HighCloud Metadata Access
Affected versions and remediation
This report applies to @minimax-ai/code@0.4.6.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.4.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.