@minimax-ai/code@0.7.2
Minimax Code — terminal coding agent
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package’s main coding-agent behavior appears consistent with its purpose, and the install hook is a local compatibility check. However, CLI runtime automatically sends session and interaction telemetry with a persistent device ID and project metadata, with no disclosure or opt-out found in the package, so this warrants a warning.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The CLI starts and tracks normal TUI activity.
Impact
MiniMax receives account and device identifiers when available, project and session metadata, and interaction events without an identified disclosure or opt-out.
Mechanism
It automatically POSTs telemetry events, including a persistent device ID and event properties, to MiniMax reporting endpoints.
AI rationale
The package’s main coding-agent behavior appears consistent with its purpose, and the install hook is a local compatibility check. However, CLI runtime automatically sends session and interaction telemetry with a persistent device ID and project metadata, with no disclosure or opt-out found in the package, so this warrants a warning.
Evidence
chunks/launcher-LRY7M6UD.js<dataDir>/business-telemetry.identity.json
Network endpoints4
data.hailuo.aidata.hailuoai.combigdata-test.talkie-ai.combigdata-test.xingyeai.com
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- CLI startup automatically tracks a `tui_launch` event and supplies the account ID when available.
- Runtime telemetry adds a persistent device ID, OS, package version, and other event properties before sending them.
- Tracked events include project basename, session IDs, prompt-suggestion actions, and slash-command or file autocomplete interactions.
- Telemetry is POSTed to MiniMax reporting endpoints; I found no package disclosure or opt-out.
Evidence against
- The postinstall hook runs a local native compatibility check.
- The package is a terminal coding agent, so user-requested model and command execution fit its purpose.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetry
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-VAVHH4XP.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as A}from"./chunk-OHWTK4KK.js";import{execFile as $,spawnSync as j}from"node:child_process";import{chmod as U,copyFile as Y,mkdtemp as E,readFile as k,rm as P,stat as z,wr...
L3: ObjC.import('AppKit');
High
Child Process
Package source references child process execution.
chunks/chunk-VAVHH4XP.jsView on unpkg · L1chunks/chunk-L7HIW3OD.jsView file
Findings
3 Critical14 High9 Medium6 Low
CriticalCommand Output Exfiltrationchunks/chunk-CPCJLLQA.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-CPCJLLQA.js
CriticalPrevious Version Dangerous Deltachunks/chunk-DCFP5ZHZ.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-VAVHH4XP.js
HighShellchunks/chunk-L7HIW3OD.js
HighEvalchunks/photon_rs-G4OEF2QT.js
HighSame File Env Network Executionchunks/chunk-L7HIW3OD.js
HighCredential Redirect Persistencechunks/launcher-LRY7M6UD.js
HighCloud Metadata Accesschunks/chunk-TBWJS4AE.js
HighRemote Agent Bridgechunks/launcher-LRY7M6UD.js
Affected versions and remediation
This report applies to @minimax-ai/code@0.7.2.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.7.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.