vllm-ascend-server

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Anomaly
AnomalyLOW
references/launch-templates/docker.md

This is deployment documentation, not evidence of embedded malware. Its examples have meaningful operational security risks: privileged containers with host mounts, an unauthenticated service bound to 0.0.0.0 on port 8000, execution enabled by --trust-remote-code, and a password-in-command sshpass example. Restrict network access, avoid unnecessary privileges and host mounts, and use safer SSH credential handling.

Confidence: 98%Severity: 66%
Audit Metadata
Analyzed At
Oct 18, 2026, 03:38 AM
Package URL
pkg:socket/skills-sh/ascend-ai-coding%2Fawesome-ascend-skills%2Fvllm-ascend-server%2F@4cb2dd202e955afb1d91b8c60721ecc2a765864b7a16694f03c3a6ebcb593498