registry / @minimax-ai/code / 0.5.1
@minimax-ai/code@0.5.1
⚠ Under reviewMinimax Code — terminal coding agent
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe inspected integration callers and installation code do not demonstrate malicious behavior. Manual review is required because assets/models-dev-catalog.json.gz is binary and the mandatory clean source-citation coverage cannot be completed without substituting decompressed or arbitrary binary bytes.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Installation runs the SQLite compatibility check; CLI use activates session discovery and update functionality.
Impact
No malicious impact was established; the remaining limitation concerns review coverage.
Mechanism
Inspected code classifies read-tool output, discovers local session metadata, and validates updates.
AI rationale
The inspected integration callers and installation code do not demonstrate malicious behavior. Manual review is required because assets/models-dev-catalog.json.gz is binary and the mandatory clean source-citation coverage cannot be completed without substituting decompressed or arbitrary binary bytes.
Decision evidence
public snapshotAI called this Manual Review at 88.0% confidence as Unknown with high false-positive risk.
AI review observations
- The required compressed catalog cannot be read or cited as UTF-8 source by the package inspection tool; decompression reveals model catalog data, but does not establish complete source citation coverage.
- package.json invokes a native compatibility checker after installation; the checker tests an in-memory SQLite database.
- The flagged instruction-file names feed read-tool display classification.
- The flagged Codex directory is used to discover session metadata, gated on availability of the resume-codex skill.
- Update code checks release signatures and staged package identity and version.
Evidence against
- Inspected source did not establish credential theft, malicious installation mutations, or an active attack.
- The decompressed catalog excerpt contains provider and model metadata.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/launcher-TOBRA6WS.jsView file
9`],["r","\r"],["t"," "],["b","\b"],["f","\f"],["v","\v"],["0","\0"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function IS(n){let e=n[0]==="u",t=n[1]==="{";return e&&!t&&n.length===5|...
L10: `);return r!==-1&&(e=o_(e,s,i,r)),i+e+s},Um,_S=(n,...e)=>{let[t]=e;if(!Dl(t)||!Dl(t.raw))return e.join(" ");let i=e.slice(1),s=[t.raw[0]];for(let r=1;r<t.length;r++)s.push(String(i...
L11: ]`).replace("lheading",Ry).replace("|table","").replace("blockquote"," {0,3}>").replace("|fences","").replace("|list","").replace("|html","").replace("|tag","").getRegex()},NA=/^\\...
High
Child Process
Package source references child process execution.
chunks/launcher-TOBRA6WS.jsView on unpkg · L9213`),i=d7(e.trim());if(!i)return[];let s=new RegExp(`^##\\s+\\[?v?${i}\\]?(?=\\s|\xB7|-|$).*$`,"imu").exec(t);if(!s)return[];let r=t.slice((s.index??0)+s[0].length),o=r.search(/^##\s...
L214: `)){let r=/^\s*-\s+(.+)$/u.exec(s);if(r){i(),t=r[1]??"";continue}let o=s.trim();if(!o||/^#{1,6}\s+/u.test(o)){i();continue}t&&(t+=` ${o}`)}return i(),e}function c7(n){return n.repl...
L215: `,r=e.text.length+s.length,o=new Set((e.attachmentPlaceholders??[]).map(({id:a})=>a));return this.restoreDraft({schemaVersion:1,text:`${e.text}${s}${i.text}`,cursor:r+i.cursor,past...
Findings
4 Critical12 High9 Medium7 Low
CriticalBrowser Credential Phishingchunks/chunk-AMRD7QKI.js
CriticalEncoded Package Runner Executionchunks/chunk-HZ2XIDMW.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-HZ2XIDMW.js
CriticalPrevious Version Dangerous Deltachunks/chunk-AVWBXBB6.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/launcher-TOBRA6WS.js
HighShellchunks/launcher-TOBRA6WS.js
HighSame File Env Network Executionchunks/chunk-ESEZD6K2.js
HighCredential Redirect Persistencechunks/launcher-TOBRA6WS.js
HighCommand Output Exfiltrationchunks/chunk-TRPB3GW5.js
HighCloud Metadata Access
Affected versions and remediation
This report applies to @minimax-ai/code@0.5.1.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.5.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.