byted-redis
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
AnomalyAnomalyscripts/mcp_client.py
LOWAnomalyLOW
scripts/mcp_client.py
The fragment is a credential-forwarding wrapper that launches and communicates with a remote Redis MCP server. It contains no direct evidence of malware, credential theft, obfuscation, or destructive behavior. The unpinned GitHub dependency executed through uvx is a significant supply-chain risk, and the child process receives sensitive credentials and network configuration. Pin the repository to a verified commit or released hash, minimize forwarded environment variables, and review or sandbox the fetched server before use.
Confidence: 97%Severity: 62%
Audit Metadata