registry / @minimax-ai/code / 0.6.13
@minimax-ai/code@0.6.13
⚠ Under reviewMinimax Code — terminal coding agent
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe inspected postinstall hook performs a native SQLite check, and the cited runtime snippets show auth-state relaying rather than an unrelated account action. Because telemetry sends identifying fields and its effective consent and full contents remain unresolved, the available inspection does not support a clean or malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Launcher telemetry is queued during runtime; the complete activation and consent path was not resolved.
Impact
The transfer may disclose identifying usage data; the inspected excerpts do not establish that sensitive prompt contents are sent.
Mechanism
The launcher posts telemetry to a MiniMax-branded reporting endpoint and includes device identifiers and user-related fields in its event properties.
AI rationale
The inspected postinstall hook performs a native SQLite check, and the cited runtime snippets show auth-state relaying rather than an unrelated account action. Because telemetry sends identifying fields and its effective consent and full contents remain unresolved, the available inspection does not support a clean or malicious verdict.
Evidence
chunks/launcher-ZXEDO3SJ.js
Network endpoints4
data.hailuo.ai/meerkat-reporter/api/report?project=MiniMaxAgentdata.hailuoai.com/meerkat-reporter/api/report?project=MiniMaxAgentbigdata-test.talkie-ai.com/meerkat-reporter/api/report?project=MiniMaxAgentbigdata-test.xingyeai.com/meerkat-reporter/api/report?project=MiniMaxAgent
Decision evidence
public snapshotAI called this Manual Review at 73.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The postinstall hook runs a native SQLite compatibility check and can fail installation; the inspected code does not show it changing files or contacting a server.
- The launcher queues POST telemetry containing device identifiers and user, operating-system, login, and version fields; the effective consent controls and full event contents remain unresolved.
- The inspected runtime snippets relay remote-auth notifications and synchronize auth state after account updates; they do not show an unrelated account action.
Evidence against
- The install hook calls the package’s native-check script, which loads better-sqlite3 for an in-memory query and reports the result.
- The inspected WebSocket code sets protocol and origin headers for its connection; the excerpt does not establish credential transfer to an unrelated recipient.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
25 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-VAVHH4XP.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as A}from"./chunk-OHWTK4KK.js";import{execFile as $,spawnSync as j}from"node:child_process";import{chmod as U,copyFile as Y,mkdtemp as E,readFile as k,rm as P,stat as z,wr...
L3: ObjC.import('AppKit');
High
Child Process
Package source references child process execution.
chunks/chunk-VAVHH4XP.jsView on unpkg · L1chunks/launcher-ZXEDO3SJ.jsView file
Findings
4 Critical14 High9 Medium6 Low
CriticalSame File Env Network Executionchunks/chunk-H6JEREKX.js
CriticalCommand Output Exfiltrationchunks/chunk-H6JEREKX.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-H6JEREKX.js
CriticalPrevious Version Dangerous Deltachunks/chunk-DCFP5ZHZ.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-VAVHH4XP.js
HighShellchunks/launcher-ZXEDO3SJ.js
HighEvalchunks/photon_rs-G4OEF2QT.js
HighCredential Redirect Persistencechunks/launcher-ZXEDO3SJ.js
HighSandbox Evasion Gated Capabilitychunks/chunk-4YHPMUTL.js
HighCloud Metadata Accesschunks/chunk-AMLNR7IO.js
Affected versions and remediation
This report applies to @minimax-ai/code@0.6.13.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.6.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.