registry / @phanthy/phanthy-codeo / 0.1.17
@phanthy/phanthy-codeo@0.1.17
⚠ Under reviewPhanthy Code coding agent for the terminal
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe inspected source connects the flagged artifact to an audio asset, but its offline analysis leaves the format unresolved. That material uncertainty prevents a clean verdict, and the inspected excerpts do not establish an attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The package’s frontend loads the referenced sound asset during application use.
Impact
The unresolved artifact prevents a confident clean verdict; no specific harmful effect is established.
Mechanism
The source maps the asset to an audio path, while the offline inspection reports its format and behavior as unresolved.
AI rationale
The inspected source connects the flagged artifact to an audio asset, but its offline analysis leaves the format unresolved. That material uncertainty prevents a clean verdict, and the inspected excerpts do not establish an attack.
Evidence
dist/assets/index-DzPDtU7H-jnjjfvzp.jsdist/assets/bip-bop-06-DiKbyBF9-ckbpednk.js.lpm-inspection-3aDEI5/0-61e9936de40a.txtdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
Decision evidence
public snapshotAI called this Manual Review at 74.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The launcher imports the bundled CLI.
- The frontend loads the flagged AAC file through an audio asset module.
- Offline analysis could not identify the AAC file’s format, leaving its behavior unresolved.
- The flagged worker uses generated code in an assembly support routine; this alone does not establish an attack.
Evidence against
- The inspected source ties the AAC file to an audio asset path, but that does not resolve the offline analysis limitation.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
10 flaggeddist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.jsView file
477?|[
L478: \v\f
\u2028\u2029])`),e));else if(l==="posix")if(!a&&(d==="graph"||d==="print")){if(n==="strict")throw new Error(`POSIX class "${d}" requires min target ES2024 or non-strict accura...
L479: `)return!1}return!1},Pu=(r,e)=>{for(let t=e-1;t>=0;t-=1){if(r[t]===")")return!1;if(r[t]==="(")return t>0&&r[t-1]==="]"?bg(r,e):!1;if(r[t]===`
High
Child Process
Package source references child process execution.
dist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.jsView on unpkg · L477dist/opentui-tree-sitter-worker.jsView file
2var sJ=Object.create;var{getPrototypeOf:tJ,defineProperty:HJ,getOwnPropertyNames:rJ}=Object;var eJ=Object.prototype.hasOwnProperty;function J0(J){return this[J]}var $0,X0,u0=(J,$,X...
L3: `)[0],P=R.match(j0)?.[0]??"";switch(Q._free(Y),k){case N.Syntax:throw new a(N.Syntax,{suffix:`${T}: '${R}'...`},T,0);case N.NodeName:throw new a(k,{word:P},T,P.length);case N.Field...
L4:
L5: ${D}`)}}));let Y=await Q.loadWebAssemblyModule(await X,{loadAsync:!0}),q=Object.keys(Y),K=q.find((V)=>U0.test(V)&&!V.includes("external_scanner_"));if(!K)throw console.log(`Couldn'...
L6: ${JSON.stringify(q,null,2)}`),Error("Language.load failed: no language function found in WASM file");let G=Y[K]();return new J(m,G)}},M0=(()=>{var _scriptName=import.meta.url;retur...
L7: `)}static async fetchHighlightQuery(J,$
Findings
1 Critical4 High7 Medium4 Low
CriticalTrojan Source Unicodedist/assets/index-DzPDtU7H-jnjjfvzp.js
HighChild Processdist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.js
HighSame File Env Network Executiondist/opentui-tree-sitter-worker.js
HighShips High Entropy Blobdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
HighSemantic Analysis Limiteddist/assets/index-DzPDtU7H-jnjjfvzp.js
MediumDynamic Requiredist/opentui-tree-sitter-worker.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/assets/tree-sitter-powershell-ryb2ffqs.wasm
MediumOversized Source Filedist/tui-worker.js
MediumOversized Cli Entrypointdist/cli.js
Affected versions and remediation
This report applies to @phanthy/phanthy-codeo@0.1.17.
See all versions of @phanthy/phanthy-codeo for other recorded verdicts.
- Review the evidence and your use of @phanthy/phanthy-codeo@0.1.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.