registry / @minimax-ai/code / 0.5.0
@minimax-ai/code@0.5.0
Minimax Code — terminal coding agent
AI Security Review
scanned 1mo ago · by lpm-firewall-aiStatic inspection found a package-aligned postinstall native dependency check and no concrete malicious behavior. The required bundles and compressed asset did not establish an attack path.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Package installation runs the declared postinstall script.
Impact
No confirmed attack behavior or persistence was established.
Mechanism
The script loads better-sqlite3 and verifies a local in-memory query; no package-owned network send, credential collection, or foreign control-surface mutation was found in the inspected entrypoints.
AI rationale
Static inspection found a package-aligned postinstall native dependency check and no concrete malicious behavior. The required bundles and compressed asset did not establish an attack path.
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only install hook runs a local native SQLite verification script.
- The install script loads better-sqlite3 and performs an in-memory smoke check.
- Required JavaScript bundles begin with static Node module and path imports.
- The compressed catalog is a data asset, not an executable entrypoint.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-ESEZD6K2.jsView file
47`+e.slice(a+1):s+=e.slice(t),s.slice(1)}function hl(e){for(var n="",i=0,r,t=0;t<e.length;i>=65536?t+=2:t++)i=Ae(e,t),r=M[i],!r&&Se(i)?(n+=e[t],i>=65536&&(n+=e[t+1])):n+=r||sl(i);re...
L48: `:""}var El=vl,Sl={dump:El};function kn(e,n){return function(){throw new Error("Function yaml."+e+" is removed in js-yaml 4. Use yaml."+n+" instead, which is now safe by default.")...
L49: `)}var He={enabled:!0};function it(e){if(e==null||typeof e!="object"||Array.isArray(e))return!1;let n=e,i=typeof n.apiKey=="string"&&n.apiKey.trim().length>0,r=typeof n.resourceId=...
High
Child Process
Package source references child process execution.
chunks/chunk-ESEZD6K2.jsView on unpkg · L4747`+e.slice(a+1):s+=e.slice(t),s.slice(1)}function hl(e){for(var n="",i=0,r,t=0;t<e.length;i>=65536?t+=2:t++)i=Ae(e,t),r=M[i],!r&&Se(i)?(n+=e[t],i>=65536&&(n+=e[t+1])):n+=r||sl(i);re...
L48: `:""}var El=vl,Sl={dump:El};function kn(e,n){return function(){throw new Error("Function yaml."+e+" is removed in js-yaml 4. Use yaml."+n+" instead, which is now safe by default.")...
L49: `)}var He={enabled:!0};function it(e){if(e==null||typeof e!="object"||Array.isArray(e))return!1;let n=e,i=typeof n.apiKey=="string"&&n.apiKey.trim().length>0,r=typeof n.resourceId=...
L50: `,"utf-8"),i=0;for(let t of n)i=(Ut[(i>>>24^t)&255]^i<<8)>>>0;let r=n.length;for(;r!==0;)i=(Ut[(i>>>24^r&255)&255]^i<<8)>>>0,r>>>=8;return(i^4294967295)>>>0}function tu(e){return r...
Findings
4 Critical12 High9 Medium7 Low
CriticalBrowser Credential Phishingchunks/chunk-AMRD7QKI.js
CriticalEncoded Package Runner Executionchunks/chunk-HZ2XIDMW.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-HZ2XIDMW.js
CriticalPrevious Version Dangerous Deltachunks/chunk-366WIFLP.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-ESEZD6K2.js
HighShellchunks/chunk-366WIFLP.js
HighSame File Env Network Executionchunks/chunk-ESEZD6K2.js
HighCredential Redirect Persistencechunks/launcher-L62YG5FO.js
HighCommand Output Exfiltrationchunks/chunk-TRPB3GW5.js
HighCloud Metadata Accesschunks/chunk-TRPB3GW5.js
Affected versions and remediation
This report applies to @minimax-ai/code@0.5.0.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.