registry / @minimax-ai/code / 0.6.12
@minimax-ai/code@0.6.12
⚠ Under reviewMinimax Code — terminal coding agent
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe inspected postinstall and agent-integration code shows environment validation, bounded session lookup, and a resume suggestion, with no confirmed malicious behavior. The bundled compressed model catalog is consumed as JSON preset data, but its offline analysis failed on a buffer-size limit, so its contents remain unresolved and a clean verdict is not supported.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Package installation runs the native compatibility check; the Codex session lookup is gated on the resume-codex skill.
Impact
No harmful impact was established from the inspected source, but the catalog contents could not be verified.
Mechanism
The install check validates the environment and SQLite availability. The Codex integration reads session metadata and offers a resume tip; a separate compressed catalog is loaded as JSON preset data.
AI rationale
The inspected postinstall and agent-integration code shows environment validation, bounded session lookup, and a resume suggestion, with no confirmed malicious behavior. The bundled compressed model catalog is consumed as JSON preset data, but its offline analysis failed on a buffer-size limit, so its contents remain unresolved and a clean verdict is not supported.
Evidence
assets/models-dev-catalog.json.gzchunks/chunk-47KWM23C.js.lpm-inspection-PA4u73/0-c6eab86fb5d0.txt
Decision evidence
public snapshotAI called this Manual Review at 83.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json runs verify-native-install.mjs from postinstall.
- The install script checks environment compatibility and runs an in-memory SQLite query.
- The flagged agent-file code identifies AGENTS.md and CLAUDE.md as resources for a read tool.
- The Codex integration reads recent session metadata from the Codex sessions directory and checks that the session belongs to the current workspace.
- The session lookup runs only when the resume-codex skill is present, and then offers a resume tip.
- The compressed model catalog is parsed as JSON preset data, but the trusted offline analysis reports that artifact inspection failed because of a buffer-size limit.
Evidence against
- The reviewed postinstall path performs a native compatibility check and SQLite smoke test.
- The Codex integration uses session metadata to offer a user-facing resume action; no agent configuration write is shown in the inspected caller.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
25 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-VAVHH4XP.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as A}from"./chunk-OHWTK4KK.js";import{execFile as $,spawnSync as j}from"node:child_process";import{chmod as U,copyFile as Y,mkdtemp as E,readFile as k,rm as P,stat as z,wr...
L3: ObjC.import('AppKit');
High
Child Process
Package source references child process execution.
chunks/chunk-VAVHH4XP.jsView on unpkg · L1chunks/launcher-AVQRYDKB.jsView file
Findings
4 Critical14 High9 Medium6 Low
CriticalSame File Env Network Executionchunks/chunk-5ADYFF2U.js
CriticalCommand Output Exfiltrationchunks/chunk-5ADYFF2U.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-5ADYFF2U.js
CriticalPrevious Version Dangerous Deltachunks/chunk-DCFP5ZHZ.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-VAVHH4XP.js
HighShellchunks/launcher-AVQRYDKB.js
HighEvalchunks/photon_rs-G4OEF2QT.js
HighCredential Redirect Persistencechunks/launcher-AVQRYDKB.js
HighSandbox Evasion Gated Capabilitychunks/chunk-QXUSWEWV.js
HighCloud Metadata Accesschunks/chunk-AMLNR7IO.js
Affected versions and remediation
This report applies to @minimax-ai/code@0.6.12.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.6.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.