registry / @phanthy/phanthy-codeo / 0.1.15
@phanthy/phanthy-codeo@0.1.15
⚠ Under reviewPhanthy Code coding agent for the terminal
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe manifest shows no install lifecycle, and the UI maps the flagged file as a sound asset. However, the available artifact analysis could not verify the file's format or behavior, so the package cannot be confidently cleared.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI command imports the bundled CLI; the flagged asset's loading behavior remains unverified.
Impact
The unresolved asset prevents a confident safety decision.
Mechanism
The available review maps the file as a sound asset, while the offline analysis could not identify its format or rule out other behavior.
AI rationale
The manifest shows no install lifecycle, and the UI maps the flagged file as a sound asset. However, the available artifact analysis could not verify the file's format or behavior, so the package cannot be confidently cleared.
Evidence
dist/assets/index-DzPDtU7H-jnjjfvzp.js.lpm-inspection-HZuL9e/0-61e9936de40a.txtdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
Decision evidence
public snapshotAI called this Manual Review at 72.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest has no lifecycle scripts and exposes a command that imports the bundled CLI.
- The UI maps the flagged AAC file as one of its sound assets.
- The offline artifact review could not verify the flagged file's format or behavior.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Oversized source lightweight scan
dist/assets/index-DzPDtU7H-jnjjfvzp.js
Source & flagged code
10 flaggeddist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.jsView file
477?|[
L478: \v\f
\u2028\u2029])`),e));else if(l==="posix")if(!a&&(d==="graph"||d==="print")){if(n==="strict")throw new Error(`POSIX class "${d}" requires min target ES2024 or non-strict accura...
L479: `)return!1}return!1},Pu=(r,e)=>{for(let t=e-1;t>=0;t-=1){if(r[t]===")")return!1;if(r[t]==="(")return t>0&&r[t-1]==="]"?bg(r,e):!1;if(r[t]===`
High
Child Process
Package source references child process execution.
dist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.jsView on unpkg · L477dist/opentui-tree-sitter-worker.jsView file
2var sJ=Object.create;var{getPrototypeOf:tJ,defineProperty:HJ,getOwnPropertyNames:rJ}=Object;var eJ=Object.prototype.hasOwnProperty;function J0(J){return this[J]}var $0,X0,u0=(J,$,X...
L3: `)[0],P=R.match(j0)?.[0]??"";switch(Q._free(Y),k){case N.Syntax:throw new a(N.Syntax,{suffix:`${T}: '${R}'...`},T,0);case N.NodeName:throw new a(k,{word:P},T,P.length);case N.Field...
L4:
L5: ${D}`)}}));let Y=await Q.loadWebAssemblyModule(await X,{loadAsync:!0}),q=Object.keys(Y),K=q.find((V)=>U0.test(V)&&!V.includes("external_scanner_"));if(!K)throw console.log(`Couldn'...
L6: ${JSON.stringify(q,null,2)}`),Error("Language.load failed: no language function found in WASM file");let G=Y[K]();return new J(m,G)}},M0=(()=>{var _scriptName=import.meta.url;retur...
L7: `)}static async fetchHighlightQuery(J,$
Findings
1 Critical4 High7 Medium4 Low
CriticalTrojan Source Unicodedist/assets/index-DzPDtU7H-jnjjfvzp.js
HighChild Processdist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.js
HighSame File Env Network Executiondist/opentui-tree-sitter-worker.js
HighShips High Entropy Blobdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
HighSemantic Analysis Limiteddist/assets/index-DzPDtU7H-jnjjfvzp.js
MediumDynamic Requiredist/opentui-tree-sitter-worker.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/assets/tree-sitter-powershell-ryb2ffqs.wasm
MediumOversized Source Filedist/tui-worker.js
MediumOversized Cli Entrypointdist/cli.js
Affected versions and remediation
This report applies to @phanthy/phanthy-codeo@0.1.15.
See all versions of @phanthy/phanthy-codeo for other recorded verdicts.
- Review the evidence and your use of @phanthy/phanthy-codeo@0.1.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.