registry / @phanthy/phanthy-codeo / 0.1.5
@phanthy/phanthy-codeo@0.1.5
⚠ Under reviewPhanthy Code coding agent for the terminal
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe manifest has no lifecycle hook, and the inspected AAC reference fits ordinary UI audio use. The large executable bundle and its flagged semantic analysis limit leave material behavior unresolved, so the source review cannot support a clean or malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the Bun CLI loads the bundled application.
Impact
No confirmed harmful effect was identified; unresolved bundle behavior prevents a clean determination.
Mechanism
The package launcher imports dist/cli.js; the inspected UI bundle references the AAC file through an audio asset loader.
AI rationale
The manifest has no lifecycle hook, and the inspected AAC reference fits ordinary UI audio use. The large executable bundle and its flagged semantic analysis limit leave material behavior unresolved, so the source review cannot support a clean or malicious verdict.
Evidence
dist/assets/index-Ch9JmY-T-qtm3vhh5.jspackage.jsonbin/phanthy-codeodist/cli.jsdist/assets/bip-bop-06-DiKbyBF9-ckbpednk.js
Decision evidence
public snapshotAI called this Manual Review at 55.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package exposes a Bun CLI that imports the bundled dist/cli.js at startup.
- The unusual AAC file is referenced through the UI audio asset loader, consistent with an application sound asset.
- The bundled UI source is very large, and the flagged semantic analysis limit leaves behavior unresolved.
Evidence against
- The manifest declares no install lifecycle scripts.
- The inspected launcher contains only an import of the CLI bundle.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
10 flaggeddist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.jsView file
477?|[
L478: \v\f
\u2028\u2029])`),e));else if(l==="posix")if(!a&&(d==="graph"||d==="print")){if(n==="strict")throw new Error(`POSIX class "${d}" requires min target ES2024 or non-strict accura...
L479: `)return!1}return!1},Pu=(r,e)=>{for(let t=e-1;t>=0;t-=1){if(r[t]===")")return!1;if(r[t]==="(")return t>0&&r[t-1]==="]"?bg(r,e):!1;if(r[t]===`
High
Child Process
Package source references child process execution.
dist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.jsView on unpkg · L477dist/opentui-tree-sitter-worker.jsView file
2var sJ=Object.create;var{getPrototypeOf:tJ,defineProperty:HJ,getOwnPropertyNames:rJ}=Object;var eJ=Object.prototype.hasOwnProperty;function J0(J){return this[J]}var $0,X0,u0=(J,$,X...
L3: `)[0],P=R.match(j0)?.[0]??"";switch(Q._free(Y),k){case N.Syntax:throw new a(N.Syntax,{suffix:`${T}: '${R}'...`},T,0);case N.NodeName:throw new a(k,{word:P},T,P.length);case N.Field...
L4:
L5: ${D}`)}}));let Y=await Q.loadWebAssemblyModule(await X,{loadAsync:!0}),q=Object.keys(Y),K=q.find((V)=>U0.test(V)&&!V.includes("external_scanner_"));if(!K)throw console.log(`Couldn'...
L6: ${JSON.stringify(q,null,2)}`),Error("Language.load failed: no language function found in WASM file");let G=Y[K]();return new J(m,G)}},M0=(()=>{var _scriptName=import.meta.url;retur...
L7: `)}static async fetchHighlightQuery(J,$
Findings
1 Critical4 High7 Medium4 Low
CriticalTrojan Source Unicodedist/assets/index-Ch9JmY-T-qtm3vhh5.js
HighChild Processdist/assets/markdown.worker-Bu_Dc9RP-vgmrh899.js
HighSame File Env Network Executiondist/opentui-tree-sitter-worker.js
HighShips High Entropy Blobdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
HighSemantic Analysis Limiteddist/assets/index-Ch9JmY-T-qtm3vhh5.js
MediumDynamic Requiredist/opentui-tree-sitter-worker.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/assets/tree-sitter-powershell-ryb2ffqs.wasm
MediumOversized Source Filedist/tui-worker.js
MediumOversized Cli Entrypointdist/cli.js
Affected versions and remediation
This report applies to @phanthy/phanthy-codeo@0.1.5.
See all versions of @phanthy/phanthy-codeo for other recorded verdicts.
- Review the evidence and your use of @phanthy/phanthy-codeo@0.1.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.