alibabacloud-loongcollector-ops
Warn
Audited by Socket on Aug 21, 2026
1 alert found:
AnomalyAnomalyreferences/cli-installation-guide.md
LOWAnomalyLOW
references/cli-installation-guide.md
No explicit malicious code is present in the provided fragment because it is installer/usage instructions rather than the plugin/CLI implementation. However, it includes a high-impact supply-chain pattern: downloading and directly executing a remote script (`curl` -> `bash -c`) without showing integrity verification, and installing/updating an external plugin that expands local execution surface. These are the primary security risks indicated by this content; further inspection would require the actual setup.sh and plugin package contents/signatures.
Confidence: 64%Severity: 50%
Audit Metadata