neuron-framework-equivalence
Warn
Audited by Socket on Oct 16, 2026
1 alert found:
AnomalyAnomalyscripts/nxdi_compiled_loader.py
LOWAnomalyLOW
scripts/nxdi_compiled_loader.py
This code is a model-loading utility and shows no direct credential theft, exfiltration, destructive behavior, or backdoor. It does execute selected Python modules and enables Transformers trust_remote_code=True, so an untrusted model path or class path can execute arbitrary code with the process's privileges; use only trusted sources. Severity is moderate and depends on the provenance of those inputs; no suspicious domains, URLs, IPs, credentials, or targeted environment variables are present.
Confidence: 98%Severity: 57%
Audit Metadata