registry / @minimax-ai/code / 0.5.9
@minimax-ai/code@0.5.9
⚠ Under reviewMinimax Code — terminal coding agent
AI Security Review
scanned 1mo ago · by lpm-firewall-aiNo concrete malicious behavior was found in the inspected relevant code. A clean verdict cannot be source-cited because the required twelve distinct paths exceed the eight-citation output limit.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Package installation runs the native check; the interactive launcher checks for a recent Codex session only when the resume command is available.
Impact
No exfiltration, remote payload execution, destructive action, or agent-configuration mutation was confirmed.
Mechanism
The native check loads the optional SQLite dependency. The launcher resolves the local Codex sessions directory and matches session metadata to the current workspace.
AI rationale
No concrete malicious behavior was found in the inspected relevant code. A clean verdict cannot be source-cited because the required twelve distinct paths exceed the eight-citation output limit.
Evidence
package.jsonverify-native-install.mjschunks/launcher-UFK2VC2A.js
Decision evidence
public snapshotAI called this Manual Review at 82.0% confidence as Unknown with low false-positive risk.
AI review observations
- The only package lifecycle hook invokes a local native-dependency verification script.
- The install script checks the optional SQLite module and reports success or failure.
- The launcher reads recent local Codex session metadata only when its resume command is available and the workspace matches.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
26 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-GN5KQHOZ.jsView file
188`)?n.source:JSON.stringify(n.source),r=n.tag?`!<${n.tag}> `:"",o=W.load(`value: ${r}${i}`).value;gd(n.value,o)||(n.value=o,delete n.format)}})}function bd(e,t){return e.items.find(...
L189: `)||void 0,i.items=i.items.filter(a=>!r.includes(a));for(let[a,l]of Object.entries(o))i.has(bd(i,a))||i.set(a,hd(e,l))}}),e.setSchema(e.directives?.yaml.version??"1.2",{schema:"cor...
L190: `)}var sr={enabled:!0};function qd(e){if(e==null||typeof e!="object"||Array.isArray(e))return!1;let t=e,n=typeof t.apiKey=="string"&&t.apiKey.trim().length>0,i=typeof t.resourceId=...
High
Child Process
Package source references child process execution.
chunks/chunk-GN5KQHOZ.jsView on unpkg · L188chunks/launcher-UFK2VC2A.js
Findings
4 Critical14 High10 Medium6 Low
CriticalSame File Env Network Executionchunks/chunk-QEPCDCRA.js
CriticalCommand Output Exfiltrationchunks/chunk-QEPCDCRA.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-QEPCDCRA.js
CriticalPrevious Version Dangerous Deltachunks/chunk-QEPCDCRA.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-GN5KQHOZ.js
HighShellchunks/launcher-UFK2VC2A.js
HighEvalchunks/photon_rs-G4OEF2QT.js
HighCredential Redirect Persistencechunks/launcher-UFK2VC2A.js
HighSandbox Evasion Gated Capabilitychunks/chunk-H4IKJTNO.js
HighCloud Metadata Accesschunks/chunk-YPNDEPC5.js
Affected versions and remediation
This report applies to @minimax-ai/code@0.5.9.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.5.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.