registry / @minimax-ai/code / 0.6.7
@minimax-ai/code@0.6.7
⚠ Under reviewMinimax Code — terminal coding agent
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe inspected lifecycle hook and agent-related excerpts do not establish an attack. Required clean citation coverage remains unresolved, so the package needs manual review rather than a clean verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Package installation or user invocation of the CLI.
Impact
The inspected excerpts do not establish malicious behavior, but the remaining required source coverage prevents a clean verdict.
Mechanism
The inspected postinstall code performs a native SQLite compatibility check; inspected agent-related code identifies instruction files for reading and searches local session data.
AI rationale
The inspected lifecycle hook and agent-related excerpts do not establish an attack. Required clean citation coverage remains unresolved, so the package needs manual review rather than a clean verdict.
Decision evidence
public snapshotAI called this Manual Review at 55.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The postinstall hook runs a native compatibility check that verifies whether it is executing as the entry script before checking SQLite.
- The source recognizes AGENTS.md and CLAUDE.md as resource files in a file-reading tool.
- The launcher reads recent session data from the CODEX_HOME sessions directory.
Evidence against
- The required clean-review citation set includes a binary file that cannot be cited as UTF-8 source; several other required files remain uninspected.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
26 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-AKM6CI7T.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as m}from"./chunk-WROGTDVD.js";import{b as X}from"./chunk-G5QL7ZHU.js";import{N as $,W as A}from"./chunk-3FETZOUF.js";import{e as I}from"./chunk-D76SO2ME.js";import{execFi...
L3: `)}function H(e){if(e.targetType==="file")return e.path;let n=e.startLine===e.endLine?String(e.startLine):`${String(e.startLine)}-${String(e.endLine)}`;return`${e.path}:${n}${e.sid...
High
Child Process
Package source references child process execution.
chunks/chunk-AKM6CI7T.jsView on unpkg · L1chunks/launcher-2D42AKF4.js
Findings
4 Critical14 High10 Medium6 Low
CriticalSame File Env Network Executionchunks/chunk-6GW6IUZR.js
CriticalCommand Output Exfiltrationchunks/chunk-6GW6IUZR.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-6GW6IUZR.js
CriticalPrevious Version Dangerous Deltachunks/chunk-6GW6IUZR.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-AKM6CI7T.js
HighShellchunks/launcher-2D42AKF4.js
HighEvalchunks/photon_rs-G4OEF2QT.js
HighCredential Redirect Persistencechunks/launcher-2D42AKF4.js
HighSandbox Evasion Gated Capabilitychunks/chunk-WQPQHX2N.js
HighCloud Metadata Accesschunks/chunk-NXXFMBAV.js
Affected versions and remediation
This report applies to @minimax-ai/code@0.6.7.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.6.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.