aicoin-market

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
lib/defaults.json

The fragment contains hardcoded API credentials, which is a security and supply-chain exposure but not evidence of malware by itself. No malicious behavior or executable attack path is present in this JSON alone. The credentials should be revoked or rotated and removed from distributed artifacts.

Confidence: 99%Severity: 72%
Audit Metadata
Analyzed At
Sep 17, 2026, 02:25 PM
Package URL
pkg:socket/skills-sh/aicoincom%2Fcoinos-skills%2Faicoin-market%2F@add8fc4f077ac18fc0377e2d43be6d387e0ea720b4256534de742a0fa5848101