registry / @phanthy/phanthy-codeo / 0.1.10
@phanthy/phanthy-codeo@0.1.10
⚠ Under reviewPhanthy Code coding agent for the terminal
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe inspected eval use is in WebAssembly glue, and the bundle references the AAC file as a UI sound asset. Its bytes remain unresolved, so the available source does not support either a clean verdict or a concrete attack finding.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Use of the CLI may load the bundled application; the asset’s activation could not be determined.
Impact
The unresolved asset prevents confirming that the package is clean; no concrete malicious effect was established.
Mechanism
The UI bundle references the AAC file as an audio asset, while offline analysis could not determine its format or behavior.
AI rationale
The inspected eval use is in WebAssembly glue, and the bundle references the AAC file as a UI sound asset. Its bytes remain unresolved, so the available source does not support either a clean verdict or a concrete attack finding.
Evidence
.lpm-inspection-VfF8px/0-61e9936de40a.txtbin/phanthy-codeodist/cli.jsdist/opentui-tree-sitter-worker.jsdist/assets/index-DzPDtU7H-jnjjfvzp.jsdist/assets/bip-bop-06-DiKbyBF9-ckbpednk.jsdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
Decision evidence
public snapshotAI called this Manual Review at 73.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest exposes a Bun CLI entrypoint and lists runtime dependencies.
- The CLI entrypoint imports the bundled application.
- The flagged worker excerpt uses eval to construct Emscripten glue functions.
- The UI bundle maps the AAC file to a sound asset.
- The offline artifact analysis could not identify or resolve the AAC file’s format or behavior.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetwork
HighEntropyStringsMinifiedPossibleObfuscationProtestwareUrlStrings
Source & flagged code
10 flaggeddist/assets/blade-DFktsHST-cwy15w3b.jsView file
1import e from"./html-derivative-BxANmYVz.js";import t from"./html-BW_6VhB7.js";import n from"./xml-BkAJuBCc.js";import a from"./sql-Dq2MiB0T.js";import r from"./javascript-WyGyM1wV...
L2: //# sourceMappingURL=blade-DFktsHST.js.map
High
Child Process
Package source references child process execution.
dist/assets/blade-DFktsHST-cwy15w3b.jsView on unpkg · L1dist/opentui-tree-sitter-worker.jsView file
2var sJ=Object.create;var{getPrototypeOf:tJ,defineProperty:HJ,getOwnPropertyNames:rJ}=Object;var eJ=Object.prototype.hasOwnProperty;function J0(J){return this[J]}var $0,X0,u0=(J,$,X...
L3: `)[0],P=R.match(j0)?.[0]??"";switch(Q._free(Y),k){case N.Syntax:throw new a(N.Syntax,{suffix:`${T}: '${R}'...`},T,0);case N.NodeName:throw new a(k,{word:P},T,P.length);case N.Field...
L4:
L5: ${D}`)}}));let Y=await Q.loadWebAssemblyModule(await X,{loadAsync:!0}),q=Object.keys(Y),K=q.find((V)=>U0.test(V)&&!V.includes("external_scanner_"));if(!K)throw console.log(`Couldn'...
L6: ${JSON.stringify(q,null,2)}`),Error("Language.load failed: no language function found in WASM file");let G=Y[K]();return new J(m,G)}},M0=(()=>{var _scriptName=import.meta.url;retur...
L7: `)}static async fetchHighlightQuery(J,$
Findings
1 Critical4 High8 Medium4 Low
CriticalTrojan Source Unicodedist/assets/index-DzPDtU7H-jnjjfvzp.js
HighChild Processdist/assets/blade-DFktsHST-cwy15w3b.js
HighSame File Env Network Executiondist/opentui-tree-sitter-worker.js
HighShips High Entropy Blobdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
HighSemantic Analysis Limiteddist/assets/index-DzPDtU7H-jnjjfvzp.js
MediumDynamic Requiredist/opentui-tree-sitter-worker.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Wasm Moduledist/assets/tree-sitter-powershell-ryb2ffqs.wasm
MediumOversized Source Filedist/tui-worker.js
MediumOversized Cli Entrypoint
Affected versions and remediation
This report applies to @phanthy/phanthy-codeo@0.1.10.
See all versions of @phanthy/phanthy-codeo for other recorded verdicts.
- Review the evidence and your use of @phanthy/phanthy-codeo@0.1.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.