registry / @minimax-ai/code / 0.6.11
@minimax-ai/code@0.6.11
⚠ Under reviewMinimax Code — terminal coding agent
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe inspected lifecycle hook runs a native compatibility check, and the flagged agent locations do not establish configuration mutation. The required compressed catalog remains unresolved after offline inspection, so the verdict is manual review.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The package’s model catalog loader reads the bundled compressed catalog during runtime.
Impact
The artifact’s contents and role cannot be fully resolved from the available inspection, so a clean verdict is not supported.
Mechanism
The loader decompresses the artifact and parses it as JSON; offline inspection of the artifact failed before its contents could be examined.
AI rationale
The inspected lifecycle hook runs a native compatibility check, and the flagged agent locations do not establish configuration mutation. The required compressed catalog remains unresolved after offline inspection, so the verdict is manual review.
Evidence
assets/models-dev-catalog.json.gz.lpm-inspection-QwtX2I/0-c6eab86fb5d0.txtchunks/chunk-7FUBWI5L.js
Decision evidence
public snapshotAI called this Manual Review at 79.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest’s postinstall hook runs the package’s native-install verifier.
- The verifier checks compatibility and performs an in-memory SQLite query.
- The indicated source location defines agent instruction filenames and a file-reading adapter.
- The other indicated location reads Codex session history from the user’s .codex directory.
- The compressed model catalog is decompressed and parsed as JSON, but its offline inspection failed before revealing its contents.
Evidence against
- The inspected postinstall verifier performs a native SQLite check; these excerpts show no consumer configuration mutation.
- The two indicated agent locations do not establish an agent configuration write.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
27 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-G7FSWJID.jsView file
188`)?n.source:JSON.stringify(n.source),r=n.tag?`!<${n.tag}> `:"",o=J.load(`value: ${r}${i}`).value;Us(n.value,o)||(n.value=o,delete n.format)}})}function _d(e,t){return e.items.find(...
L189: `)||void 0,i.items=i.items.filter(a=>!r.includes(a));for(let[a,l]of Object.entries(o))i.has(_d(i,a))||i.set(a,vd(e,l))}}),e.setSchema(e.directives?.yaml.version??"1.2",{schema:"cor...
L190: `)}var ar={enabled:!0};function Vd(e){if(e==null||typeof e!="object"||Array.isArray(e))return!1;let t=e,n=typeof t.apiKey=="string"&&t.apiKey.trim().length>0,i=typeof t.resourceId=...
High
Child Process
Package source references child process execution.
chunks/chunk-G7FSWJID.jsView on unpkg · L188chunks/launcher-BADSPVA5.js
Findings
4 Critical15 High10 Medium6 Low
CriticalSame File Env Network Executionchunks/chunk-FNHS672G.js
CriticalCommand Output Exfiltrationchunks/chunk-FNHS672G.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-FNHS672G.js
CriticalPrevious Version Dangerous Deltachunks/chunk-FNHS672G.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-G7FSWJID.js
HighShellchunks/launcher-BADSPVA5.js
HighEvalchunks/photon_rs-G4OEF2QT.js
HighCredential Redirect Persistencechunks/launcher-BADSPVA5.js
HighSandbox Evasion Gated Capabilitychunks/chunk-UQ2YIDWV.js
HighCloud Metadata Accesschunks/chunk-NXXFMBAV.js
Affected versions and remediation
This report applies to @minimax-ai/code@0.6.11.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.6.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.