registry / @minimax-ai/code / 0.5.2
@minimax-ai/code@0.5.2
⚠ Under reviewMinimax Code — terminal coding agent
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe inspected code did not establish malicious behavior. A clean verdict cannot be published because the required ten-path citation coverage exceeds the schema's eight-citation limit.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Installation invokes the postinstall compatibility check; normal CLI use invokes its commands.
Impact
No confirmed malicious impact was established by this static inspection.
Mechanism
The package performs native-module validation and provides user-invoked CLI features such as authentication and updates.
AI rationale
The inspected code did not establish malicious behavior. A clean verdict cannot be published because the required ten-path citation coverage exceeds the schema's eight-citation limit.
Decision evidence
public snapshotAI called this Manual Review at 91.0% confidence as Unknown with low false-positive risk.
AI review observations
- The package defines a postinstall hook that runs a native SQLite compatibility check.
- The inspected entrypoints implement an interactive coding CLI, authentication, clipboard handling, and an explicit update command.
- The required clean report needs ten distinct source citations, while the response schema permits at most eight.
Evidence against
- No concrete credential exfiltration, remote payload execution, destructive action, or install-time AI-agent control-surface mutation was identified in the inspected code.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
22 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-SB5TXGMX.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as q_,b as Y_,c as H_}from"./chunk-GMLXHJYG.js";import{a as E0}from"./chunk-HQ2U4QVQ.js";import{c as b,d as ir,e as $_}from"./chunk-D76SO2ME.js";var pN=b((s9e,mN)=>{functi...
L3: https://github.com/highlightjs/highlight.js/issues/2277`),at=x,j=k);let nt={code:j,language:at};gt("before:highlight",nt);let J=nt.result?nt.result:f(nt.language,nt.code,ae,H);retu...
High
Child Process
Package source references child process execution.
chunks/chunk-SB5TXGMX.jsView on unpkg · L17]`,{returnEnd:!0,relevance:0}),{className:"title",begin:"[\\[\\]]",relevance:0},{className:"string",begin:"[\\.,]",relevance:0},{begin:/(?:\+\+|--)/,contains:[t]},t]}}dA.exports=Cz...
L8: `},u]}}ZD.exports=YQ});var tM=b((z4e,eM)=>{function HQ(e){let t="[a-zA-Z_][\\w.]*",r="<\\?(lasso(script)?|=)",n="\\]|\\?>",i={$pattern:t+"|&[lg]t;",literal:"true false none minimal...
L9: ]*;`,relevance:0},{begin:"[vp][0-9]+"}]}}Dw.exports=D4});var ww=b((sje,Lw)=>{function M4(e){let t="[a-z][a-zA-Z0-9_]*",r={className:"string",begin:"\\$.{1}"},n={className:"symbol",...
Findings
3 Critical12 High9 Medium6 Low
CriticalEncoded Package Runner Executionchunks/chunk-D4NHJY5Q.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-D4NHJY5Q.js
CriticalPrevious Version Dangerous Deltachunks/chunk-GVOM3FWI.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-SB5TXGMX.js
HighShellchunks/chunk-SB5TXGMX.js
HighSame File Env Network Executionchunks/chunk-SB5TXGMX.js
HighCredential Redirect Persistencechunks/launcher-BKHZAKO7.js
HighCommand Output Exfiltrationchunks/chunk-SB5TXGMX.js
HighSandbox Evasion Gated Capabilitychunks/chunk-PSPUWY4I.js
HighCloud Metadata Accesschunks/chunk-JL2KELF5.js
Affected versions and remediation
This report applies to @minimax-ai/code@0.5.2.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.5.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.