registry / @minimax-ai/code / 0.7.3
@minimax-ai/code@0.7.3
Minimax Code — terminal coding agent
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe install hook performs a local compatibility check, and the flagged data upload is tied to submitting feedback with a selected diagnostic bundle. The bundle may include sensitive session details, but the reviewed code does not show automatic upload on install, import or startup.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the feedback flow and includes the selected diagnostic bundle.
Impact
The selected feedback bundle can contain conversation history, tool calls, command output and local paths; the reviewed source associates this collection with user-submitted feedback.
Mechanism
The package assembles bounded session artifacts and recent runtime logs, then uploads them to its regional MiniMax service.
AI rationale
The install hook performs a local compatibility check, and the flagged data upload is tied to submitting feedback with a selected diagnostic bundle. The bundle may include sensitive session details, but the reviewed code does not show automatic upload on install, import or startup.
Network endpoints2
agent.minimaxi.com/matrix/api/v1/log/uploadagent.minimax.io/matrix/api/v1/log/upload
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook only checks Node and native SQLite compatibility; it reports an error or that the check passed.
- Diagnostic uploads are part of the feedback flow and contain a redacted feedback description plus a selected session subtree and bounded runtime logs.
- Diagnostic upload destinations are the package’s regional MiniMax service hosts.
Evidence against
- A feedback bundle can include canonical conversation and tool-call history, snapshots, LLM call envelopes, runtime logs and structured events; those may contain prompts, command output and local paths.
- The feedback uploader sends a ZIP to MiniMax’s log-upload endpoint when invoked.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-L7HIW3OD.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as K_,b as V_,c as W_}from"./chunk-GMLXHJYG.js";import{a as R0}from"./chunk-HQ2U4QVQ.js";import{c as T,d as ir,e as H_}from"./chunk-D76SO2ME.js";var EN=T((g9e,gN)=>{functi...
L3: https://github.com/highlightjs/highlight.js/issues/2277`),De=x,V=P);let we={code:V,language:De};le("before:highlight",we);let X=we.result?we.result:f(we.language,we.code,q,G);retur...
High
Child Process
Package source references child process execution.
chunks/chunk-L7HIW3OD.jsView on unpkg · L17]`,{returnEnd:!0,relevance:0}),{className:"title",begin:"[\\[\\]]",relevance:0},{className:"string",begin:"[\\.,]",relevance:0},{begin:/(?:\+\+|--)/,contains:[t]},t]}}fA.exports=Dz...
L8: `},u]}}rM.exports=XQ});var oM=T((n8e,iM)=>{function ZQ(e){let t="[a-zA-Z_][\\w.]*",r="<\\?(lasso(script)?|=)",n="\\]|\\?>",i={$pattern:t+"|&[lg]t;",literal:"true false none minimal...
L9: ]*;`,relevance:0},{begin:"[vp][0-9]+"}]}}Pw.exports=B4});var Uw=T((gje,Fw)=>{function G4(e){let t="[a-z][a-zA-Z0-9_]*",r={className:"string",begin:"\\$.{1}"},n={className:"symbol",...
Findings
3 Critical14 High9 Medium6 Low
CriticalCommand Output Exfiltrationchunks/chunk-XIIK5WQF.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-XIIK5WQF.js
CriticalPrevious Version Dangerous Deltachunks/chunk-NTK6PXFW.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-L7HIW3OD.js
HighShellchunks/chunk-L7HIW3OD.js
HighEvalchunks/photon_rs-G4OEF2QT.js
HighSame File Env Network Executionchunks/chunk-L7HIW3OD.js
HighCredential Redirect Persistencechunks/launcher-6NHUNUIC.js
HighCloud Metadata Accesschunks/chunk-CHEOBXXY.js
HighRemote Agent Bridgechunks/launcher-6NHUNUIC.js
Affected versions and remediation
This report applies to @minimax-ai/code@0.7.3.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.7.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.