registry / @phanthy/phanthy-codeo / 0.1.12
@phanthy/phanthy-codeo@0.1.12
⚠ Under reviewPhanthy Code coding agent for the terminal
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe manifest has no lifecycle scripts, and inspected source references the flagged AAC file as a UI audio asset. Its binary contents remain unverified, so the source does not establish an attack or support a clean verdict.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Unresolved; the sound-effect module is lazy-loaded by the UI bundle.
Impact
No malicious effect is established; the unresolved binary prevents a clean determination.
Mechanism
The module returns the AAC file as an asset URL; its binary contents remain unverified.
AI rationale
The manifest has no lifecycle scripts, and inspected source references the flagged AAC file as a UI audio asset. Its binary contents remain unverified, so the source does not establish an attack or support a clean verdict.
Evidence
dist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aacpackage.jsonbin/phanthy-codeodist/opentui-tree-sitter-worker.jsdist/assets/index-DzPDtU7H-jnjjfvzp.jsdist/assets/bip-bop-06-DiKbyBF9-ckbpednk.js
Decision evidence
public snapshotAI called this Manual Review at 86.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares a command-line entry point and no lifecycle scripts.
- The executable entry point imports the CLI bundle when invoked.
- The flagged worker evaluation is an assembly-to-function pattern in an Emscripten worker.
- The UI bundle maps the sound effect to a lazy-loaded audio module.
- That audio module exports the flagged AAC file as an asset URL; its binary behavior could not be independently verified.
Evidence against
- No concrete attack behavior was established in the inspected excerpts.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetwork
HighEntropyStringsMinifiedPossibleObfuscationProtestwareUrlStrings
Source & flagged code
10 flaggeddist/assets/blade-DFktsHST-cwy15w3b.jsView file
1import e from"./html-derivative-BxANmYVz.js";import t from"./html-BW_6VhB7.js";import n from"./xml-BkAJuBCc.js";import a from"./sql-Dq2MiB0T.js";import r from"./javascript-WyGyM1wV...
L2: //# sourceMappingURL=blade-DFktsHST.js.map
High
Child Process
Package source references child process execution.
dist/assets/blade-DFktsHST-cwy15w3b.jsView on unpkg · L1dist/opentui-tree-sitter-worker.jsView file
2var sJ=Object.create;var{getPrototypeOf:tJ,defineProperty:HJ,getOwnPropertyNames:rJ}=Object;var eJ=Object.prototype.hasOwnProperty;function J0(J){return this[J]}var $0,X0,u0=(J,$,X...
L3: `)[0],P=R.match(j0)?.[0]??"";switch(Q._free(Y),k){case N.Syntax:throw new a(N.Syntax,{suffix:`${T}: '${R}'...`},T,0);case N.NodeName:throw new a(k,{word:P},T,P.length);case N.Field...
L4:
L5: ${D}`)}}));let Y=await Q.loadWebAssemblyModule(await X,{loadAsync:!0}),q=Object.keys(Y),K=q.find((V)=>U0.test(V)&&!V.includes("external_scanner_"));if(!K)throw console.log(`Couldn'...
L6: ${JSON.stringify(q,null,2)}`),Error("Language.load failed: no language function found in WASM file");let G=Y[K]();return new J(m,G)}},M0=(()=>{var _scriptName=import.meta.url;retur...
L7: `)}static async fetchHighlightQuery(J,$
Findings
1 Critical4 High8 Medium4 Low
CriticalTrojan Source Unicodedist/assets/index-DzPDtU7H-jnjjfvzp.js
HighChild Processdist/assets/blade-DFktsHST-cwy15w3b.js
HighSame File Env Network Executiondist/opentui-tree-sitter-worker.js
HighShips High Entropy Blobdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
HighSemantic Analysis Limiteddist/assets/index-DzPDtU7H-jnjjfvzp.js
MediumDynamic Requiredist/opentui-tree-sitter-worker.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Wasm Moduledist/assets/tree-sitter-powershell-ryb2ffqs.wasm
MediumOversized Source Filedist/tui-worker.js
MediumOversized Cli Entrypoint
Affected versions and remediation
This report applies to @phanthy/phanthy-codeo@0.1.12.
See all versions of @phanthy/phanthy-codeo for other recorded verdicts.
- Review the evidence and your use of @phanthy/phanthy-codeo@0.1.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.