hey

Pass

Audited by Socket on Aug 20, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Aug 20, 2026, 10:21 PM

Package URL

pkg:socket/skills-sh/basecamp%2Fskills%2Fhey%2F@772270773a863e4449309c1609e7aa981359f81b7b1832aa340e024e920324fa

Security Audit — socket — hey