registry / @phanthy/phanthy-codeo / 0.1.16
@phanthy/phanthy-codeo@0.1.16
⚠ Under reviewPhanthy Code coding agent for the terminal
AI Security Review
scanned 14d ago · by lpm-firewall-aiSource inspection found no confirmed attack, but the required binary artifact remains unsupported by offline analysis. Its audio mappings suggest a benign role, yet the artifact contents are unresolved, so manual review is appropriate.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The package CLI or bundled UI is used.
Impact
No concrete harmful impact is established; the unresolved artifact prevents a clean determination.
Mechanism
A generated bundle references the binary as a bip-bop AAC asset; offline analysis could not identify its format or contents.
AI rationale
Source inspection found no confirmed attack, but the required binary artifact remains unsupported by offline analysis. Its audio mappings suggest a benign role, yet the artifact contents are unresolved, so manual review is appropriate.
Evidence
dist/opencode-web-ui.gen.jsdist/assets/index-DzPDtU7H-jnjjfvzp.js.lpm-inspection-m8Q5Y5/0-61e9936de40a.txtdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
Decision evidence
public snapshotAI called this Manual Review at 69.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The CLI entrypoint imports the bundled CLI.
- The bundle maps the flagged file to a bip-bop AAC asset, and the UI bundle maps bip-bop AAC files under an audio asset path.
- The offline artifact analysis could not identify the file format, so its contents remain unresolved.
Evidence against
- The inspected package manifest identifies a CLI entrypoint and lists no lifecycle hook in the inspected manifest section.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
10 flaggeddist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.jsView file
477?|[
L478: \v\f
\u2028\u2029])`),e));else if(l==="posix")if(!a&&(d==="graph"||d==="print")){if(n==="strict")throw new Error(`POSIX class "${d}" requires min target ES2024 or non-strict accura...
L479: `)return!1}return!1},Pu=(r,e)=>{for(let t=e-1;t>=0;t-=1){if(r[t]===")")return!1;if(r[t]==="(")return t>0&&r[t-1]==="]"?bg(r,e):!1;if(r[t]===`
High
Child Process
Package source references child process execution.
dist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.jsView on unpkg · L477dist/opentui-tree-sitter-worker.jsView file
2var sJ=Object.create;var{getPrototypeOf:tJ,defineProperty:HJ,getOwnPropertyNames:rJ}=Object;var eJ=Object.prototype.hasOwnProperty;function J0(J){return this[J]}var $0,X0,u0=(J,$,X...
L3: `)[0],P=R.match(j0)?.[0]??"";switch(Q._free(Y),k){case N.Syntax:throw new a(N.Syntax,{suffix:`${T}: '${R}'...`},T,0);case N.NodeName:throw new a(k,{word:P},T,P.length);case N.Field...
L4:
L5: ${D}`)}}));let Y=await Q.loadWebAssemblyModule(await X,{loadAsync:!0}),q=Object.keys(Y),K=q.find((V)=>U0.test(V)&&!V.includes("external_scanner_"));if(!K)throw console.log(`Couldn'...
L6: ${JSON.stringify(q,null,2)}`),Error("Language.load failed: no language function found in WASM file");let G=Y[K]();return new J(m,G)}},M0=(()=>{var _scriptName=import.meta.url;retur...
L7: `)}static async fetchHighlightQuery(J,$
Findings
1 Critical4 High7 Medium4 Low
CriticalTrojan Source Unicodedist/assets/index-DzPDtU7H-jnjjfvzp.js
HighChild Processdist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.js
HighSame File Env Network Executiondist/opentui-tree-sitter-worker.js
HighShips High Entropy Blobdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
HighSemantic Analysis Limiteddist/assets/index-DzPDtU7H-jnjjfvzp.js
MediumDynamic Requiredist/opentui-tree-sitter-worker.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/assets/tree-sitter-powershell-ryb2ffqs.wasm
MediumOversized Source Filedist/tui-worker.js
MediumOversized Cli Entrypointdist/cli.js
Affected versions and remediation
This report applies to @phanthy/phanthy-codeo@0.1.16.
See all versions of @phanthy/phanthy-codeo for other recorded verdicts.
- Review the evidence and your use of @phanthy/phanthy-codeo@0.1.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.