context-drop
Fail
Audited by Socket on Sep 3, 2026
1 alert found:
MalwareMalwarescripts/drop.py
HIGHMalwareHIGH
scripts/drop.py
This module is a local-file collection and remote-upload client. It recursively reads arbitrary local files from operator-supplied paths, encodes contents (text or base64), and exfiltrates them via authenticated HTTP POST to a configurable remote API to generate shareable URLs with deletion control. The presence of environment-configured destination/authentication and heuristic-only secret avoidance make it high-risk for supply-chain scenarios where it could be invoked to transmit sensitive data.
Confidence: 80%Severity: 92%
Audit Metadata