@phanthy/phanthy-codeo@0.2.12
Phanthy Code coding agent for the terminal
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe CLI sends runtime telemetry to the package’s own service without disclosing it in the README. Because the payload can include account email and identifiers alongside a persistent device ID, this warrants a warning rather than a clean verdict.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Runs by default when the CLI starts and when it makes API queries; PHANTHY_CODEO_TELEMETRY=0 disables it.
Impact
The vendor receives a persistent device identifier and, for signed-in accounts, email and account identifiers alongside session and model usage details.
Mechanism
Buffers telemetry locally and posts batches with a bearer token to the vendor’s event logging endpoint.
AI rationale
The CLI sends runtime telemetry to the package’s own service without disclosing it in the README. Because the payload can include account email and identifiers alongside a persistent device ID, this warrants a warning rather than a clean verdict.
Evidence
dist/tui-worker.jsO_.Path.data/telemetry/events.jsonlO_.Path.data/telemetry/device-id
Network endpoints1
code.phanthy.com/api/event_logging/batch
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Runtime telemetry is enabled by default and can be disabled with PHANTHY_CODEO_TELEMETRY=0.
- Telemetry events can include a persistent device ID, account email and account or organization IDs, plus session, model and provider details.
- The CLI emits startup and exit events, and records session, model, provider and usage counts for API queries.
- Batched events are sent to https://code.phanthy.com/api/event_logging/batch using the package service token.
Evidence against
- package.json defines no install lifecycle scripts.
- Telemetry is sent to the package’s own service; the inspected event fields do not include prompts or file contents.
Behavioral surface
DynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
9 flaggeddist/opentui-tree-sitter-worker.jsView file
2var sJ=Object.create;var{getPrototypeOf:tJ,defineProperty:HJ,getOwnPropertyNames:rJ}=Object;var eJ=Object.prototype.hasOwnProperty;function J0(J){return this[J]}var $0,X0,u0=(J,$,X...
L3: `)[0],P=R.match(j0)?.[0]??"";switch(Q._free(Y),k){case N.Syntax:throw new a(N.Syntax,{suffix:`${T}: '${R}'...`},T,0);case N.NodeName:throw new a(k,{word:P},T,P.length);case N.Field...
L4:
L5: ${D}`)}}));let Y=await Q.loadWebAssemblyModule(await X,{loadAsync:!0}),q=Object.keys(Y),K=q.find((V)=>U0.test(V)&&!V.includes("external_scanner_"));if(!K)throw console.log(`Couldn'...
L6: ${JSON.stringify(q,null,2)}`),Error("Language.load failed: no language function found in WASM file");let G=Y[K]();return new J(m,G)}},M0=(()=>{var _scriptName=import.meta.url;retur...
L7: `)}static async fetchHighlightQuery(J,$
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/opentui-tree-sitter-worker.jsView on unpkg · L22var sJ=Object.create;var{getPrototypeOf:tJ,defineProperty:HJ,getOwnPropertyNames:rJ}=Object;var eJ=Object.prototype.hasOwnProperty;function J0(J){return this[J]}var $0,X0,u0=(J,$,X...
L3: `)[0],P=R.match(j0)?.[0]??"";switch(Q._free(Y),k){case N.Syntax:throw new a(N.Syntax,{suffix:`${T}: '${R}'...`},T,0);case N.NodeName:throw new a(k,{word:P},T,P.length);case N.Field...
L4:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
Findings
1 Critical3 High7 Medium5 Low
CriticalTrojan Source Unicodedist/assets/index-DEpqNX0O-cggx92ky.js
HighSame File Env Network Executiondist/opentui-tree-sitter-worker.js
HighShips High Entropy Blobdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
HighSemantic Analysis Limiteddist/assets/index-DEpqNX0O-cggx92ky.js
MediumDynamic Requiredist/opentui-tree-sitter-worker.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/assets/tree-sitter-powershell-ryb2ffqs.wasm
MediumOversized Source Filedist/tui-worker.js
MediumOversized Cli Entrypointdist/cli.js
MediumStructural Risk Force Deep Review
LowEvaldist/opentui-tree-sitter-worker.js
Affected versions and remediation
This report applies to @phanthy/phanthy-codeo@0.2.12.
See all versions of @phanthy/phanthy-codeo for other recorded verdicts.
- Review the evidence and your use of @phanthy/phanthy-codeo@0.2.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.