vibe-deck
Warn
Audited by Socket on Oct 10, 2026
1 alert found:
AnomalyAnomalytemplate/src/components/PasswordGate.jsx
LOWAnomalyLOW
template/src/components/PasswordGate.jsx
No evidence of malware or data exfiltration. This is a weak client-side access-control mechanism: its verification logic and expected hash are exposed, localStorage can be forged, and the fallback password is predictable. Do not rely on it to protect sensitive content; enforce authorization on a trusted server.
Confidence: 99%Severity: 68%
Audit Metadata