alibabacloud-flink-python-job-submission
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyreferences/cli-installation-guide.md
LOWAnomalyLOW
references/cli-installation-guide.md
The content is legitimate-looking Aliyun CLI documentation with no direct evidence of malware or malicious intent. However, piping a remotely downloaded script directly to bash creates a significant supply-chain exposure because the script is neither inspected nor integrity-pinned. Prefer downloading, reviewing, and verifying the script or using a package manager with signed artifacts before execution.
Confidence: 96%Severity: 58%
Audit Metadata