byted-vod-process-tools
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
AnomalyAnomalyscripts/vod_local_upload.py
LOWAnomalyLOW
scripts/vod_local_upload.py
The fragment is a legitimate media-upload implementation and shows no clear malware indicators or intentional sabotage. It reads local files and sends them, together with authorization headers, to endpoints supplied by application data. If that data can be manipulated by an attacker, arbitrary file upload and credential disclosure to attacker-controlled endpoints are possible; callers should validate hosts, schemes, paths, and header destinations before invoking VPC or fallback upload paths. The manually generated VPC completion body also warrants correctness review.
Confidence: 97%Severity: 58%
Audit Metadata