@minimax-ai/code@0.7.4
Minimax Code — terminal coding agent
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe TUI sends runtime telemetry by default, including a persistent device ID and user or account identifiers alongside launch metadata. The inspected payload contains no prompts, file contents, or credentials, so this warrants a warning for undisclosed telemetry rather than a publish block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The TUI runs and records a launch event.
Impact
The vendor receives usage and device metadata without a disclosed opt-out found in the inspected source.
Mechanism
The default telemetry client queues event data and POSTs it to a regional MiniMax/Hailuo reporting endpoint.
AI rationale
The TUI sends runtime telemetry by default, including a persistent device ID and user or account identifiers alongside launch metadata. The inspected payload contains no prompts, file contents, or credentials, so this warrants a warning for undisclosed telemetry rather than a publish block.
Evidence
chunks/launcher-PGKRJM4Z.jsbusiness-telemetry.identity.json
Network endpoints4
data.hailuo.aidata.hailuoai.combigdata-test.talkie-ai.combigdata-test.xingyeai.com
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The TUI initializes business telemetry by default and queues report events for POST to a region- and build-specific reporting endpoint.
- Telemetry includes a MiniMax user ID when available, a service op-group ID, a persistent random device ID, platform, app version, and event properties.
- The TUI records a launch event with launch type and user ID; the README does not disclose this telemetry or describe a way to turn it off.
- The documented package purpose is an interactive coding agent that edits code and runs commands.
- The postinstall check runs a SQLite smoke query against an in-memory database.
Evidence against
- The telemetry fields inspected are usage and device metadata; no prompts, file contents, or credentials were present in the inspected event construction.
- Command execution is part of the package’s documented coding-agent purpose.
- The postinstall script’s inspected SQLite check is limited to an in-memory query.
Behavioral surface
ChildProcessCryptoDynamicRequire
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgchunks/chunk-L7HIW3OD.jsView file
1import { createRequire as __mavis_cR } from "module"; import { basename as __mavis_basename, dirname as __mavis_dirname, join as __mavis_join } from "path"; import { fileURLToPath ...
L2: import{a as K_,b as V_,c as W_}from"./chunk-GMLXHJYG.js";import{a as R0}from"./chunk-HQ2U4QVQ.js";import{c as T,d as ir,e as H_}from"./chunk-D76SO2ME.js";var EN=T((g9e,gN)=>{functi...
L3: https://github.com/highlightjs/highlight.js/issues/2277`),De=x,V=P);let we={code:V,language:De};le("before:highlight",we);let X=we.result?we.result:f(we.language,we.code,q,G);retur...
High
Child Process
Package source references child process execution.
chunks/chunk-L7HIW3OD.jsView on unpkg · L17]`,{returnEnd:!0,relevance:0}),{className:"title",begin:"[\\[\\]]",relevance:0},{className:"string",begin:"[\\.,]",relevance:0},{begin:/(?:\+\+|--)/,contains:[t]},t]}}fA.exports=Dz...
L8: `},u]}}rM.exports=XQ});var oM=T((n8e,iM)=>{function ZQ(e){let t="[a-zA-Z_][\\w.]*",r="<\\?(lasso(script)?|=)",n="\\]|\\?>",i={$pattern:t+"|&[lg]t;",literal:"true false none minimal...
L9: ]*;`,relevance:0},{begin:"[vp][0-9]+"}]}}Pw.exports=B4});var Uw=T((gje,Fw)=>{function G4(e){let t="[a-z][a-zA-Z0-9_]*",r={className:"string",begin:"\\$.{1}"},n={className:"symbol",...
Findings
3 Critical14 High9 Medium6 Low
CriticalCommand Output Exfiltrationchunks/chunk-YYSTRBDA.js
CriticalTrigger Reachable Dangerous Capabilitychunks/chunk-YYSTRBDA.js
CriticalPrevious Version Dangerous Deltachunks/chunk-CV4DZGP2.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processchunks/chunk-L7HIW3OD.js
HighShellchunks/chunk-L7HIW3OD.js
HighEvalchunks/photon_rs-G4OEF2QT.js
HighSame File Env Network Executionchunks/chunk-L7HIW3OD.js
HighCredential Redirect Persistencechunks/launcher-PGKRJM4Z.js
HighCloud Metadata Accesschunks/chunk-CV4DZGP2.js
HighRemote Agent Bridgechunks/launcher-PGKRJM4Z.js
Affected versions and remediation
This report applies to @minimax-ai/code@0.7.4.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.7.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.