registry / @phanthy/phanthy-codeo / 0.2.2
@phanthy/phanthy-codeo@0.2.2
⚠ Under reviewPhanthy Code coding agent for the terminal
AI Security Review
scanned 14d ago · by lpm-firewall-aiStatic inspection found no confirmed malicious behavior, but the required asset's format and behavior remain unresolved, and the bundled CLI is very large. Manual review is appropriate because the available source evidence cannot resolve these limits.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the declared command starts the bundled CLI.
Impact
The available evidence does not establish an attack, but the unresolved asset prevents a confident clean verdict.
Mechanism
The launcher imports the CLI; the UI asset map references the unresolved file as audio.
AI rationale
Static inspection found no confirmed malicious behavior, but the required asset's format and behavior remain unresolved, and the bundled CLI is very large. Manual review is appropriate because the available source evidence cannot resolve these limits.
Evidence
.lpm-inspection-HRDSiF/0-61e9936de40a.txtpackage.jsonbin/phanthy-codeodist/assets/index-CPA1bGaa-7ke7bw9k.jsdist/assets/bip-bop-06-DiKbyBF9-ckbpednk.jsdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
Decision evidence
public snapshotAI called this Manual Review at 73.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package command imports a large bundled CLI, and a required asset remains unresolved: offline analysis could not determine whether its bytes are executable.
- The asset is mapped by the UI bundle as an audio resource, but its actual format and behavior could not be verified.
- The manifest has no lifecycle scripts, and the command starts only through the declared executable.
Evidence against
- The launcher imports the CLI directly; the inspected entrypoint contains no install-time execution.
- The suspiciously flagged asset is referenced through the UI's audio asset map.
Behavioral surface
DynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
9 flaggeddist/opentui-tree-sitter-worker.jsView file
2var sJ=Object.create;var{getPrototypeOf:tJ,defineProperty:HJ,getOwnPropertyNames:rJ}=Object;var eJ=Object.prototype.hasOwnProperty;function J0(J){return this[J]}var $0,X0,u0=(J,$,X...
L3: `)[0],P=R.match(j0)?.[0]??"";switch(Q._free(Y),k){case N.Syntax:throw new a(N.Syntax,{suffix:`${T}: '${R}'...`},T,0);case N.NodeName:throw new a(k,{word:P},T,P.length);case N.Field...
L4:
L5: ${D}`)}}));let Y=await Q.loadWebAssemblyModule(await X,{loadAsync:!0}),q=Object.keys(Y),K=q.find((V)=>U0.test(V)&&!V.includes("external_scanner_"));if(!K)throw console.log(`Couldn'...
L6: ${JSON.stringify(q,null,2)}`),Error("Language.load failed: no language function found in WASM file");let G=Y[K]();return new J(m,G)}},M0=(()=>{var _scriptName=import.meta.url;retur...
L7: `)}static async fetchHighlightQuery(J,$
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/opentui-tree-sitter-worker.jsView on unpkg · L22var sJ=Object.create;var{getPrototypeOf:tJ,defineProperty:HJ,getOwnPropertyNames:rJ}=Object;var eJ=Object.prototype.hasOwnProperty;function J0(J){return this[J]}var $0,X0,u0=(J,$,X...
L3: `)[0],P=R.match(j0)?.[0]??"";switch(Q._free(Y),k){case N.Syntax:throw new a(N.Syntax,{suffix:`${T}: '${R}'...`},T,0);case N.NodeName:throw new a(k,{word:P},T,P.length);case N.Field...
L4:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
Findings
1 Critical3 High7 Medium5 Low
CriticalTrojan Source Unicodedist/assets/index-CPA1bGaa-7ke7bw9k.js
HighSame File Env Network Executiondist/opentui-tree-sitter-worker.js
HighShips High Entropy Blobdist/assets/bip-bop-06-BuvNosjK-g1w3kzjq.aac
HighSemantic Analysis Limiteddist/assets/index-CPA1bGaa-7ke7bw9k.js
MediumDynamic Requiredist/opentui-tree-sitter-worker.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/assets/tree-sitter-powershell-ryb2ffqs.wasm
MediumOversized Source Filedist/tui-worker.js
MediumOversized Cli Entrypointdist/cli.js
MediumStructural Risk Force Deep Review
LowEvaldist/opentui-tree-sitter-worker.js
Affected versions and remediation
This report applies to @phanthy/phanthy-codeo@0.2.2.
See all versions of @phanthy/phanthy-codeo for other recorded verdicts.
- Review the evidence and your use of @phanthy/phanthy-codeo@0.2.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.