alibabacloud-cms-dataset
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyreferences/cli-installation-guide.md
LOWAnomalyLOW
references/cli-installation-guide.md
The content is a legitimate-looking Aliyun CLI installation and configuration guide. No direct malware or intentional data theft is evident. The main security concern is the recommended curl-to-bash execution of an unverified remote script, compounded by mutable download URLs without checksums or signatures. Credential exposure through command-line arguments is an additional configuration risk. Installation should preferably use a trusted package manager or verified, pinned releases and the setup script should be reviewed before execution.
Confidence: 96%Severity: 55%
Audit Metadata