vercel-cli
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
SecuritySecurityscripts/vercel-bypass.sh
MEDIUMSecurityMEDIUM
scripts/vercel-bypass.sh
This module is not overtly malware-like (no obfuscation, no shellcode, no reverse shell, no system damage), but it is explicitly designed to bypass Vercel deployment protection by creating/using protection-bypass tokens and by sending a bypass secret as an HTTP header to fetch protected content. It therefore carries high misuse potential and may leak sensitive token/secret values to stdout via unredacted jq output depending on what the Vercel API returns. Treat as a security-sensitive authorization-bypass utility and restrict handling/logging of secrets and outputs.
Confidence: 74%Severity: 78%
Audit Metadata