hyperframes-media
Warn
Audited by Socket on Oct 20, 2026
1 alert found:
AnomalyAnomalyscripts/lib/bgm.mjs
LOWAnomalyLOW
scripts/lib/bgm.mjs
The code appears to implement legitimate background-music retrieval and generation rather than malware. No direct secret exfiltration or destructive behavior is present. Security concerns are concentrated in unpinned runtime pip installation, execution of a caller-provided Python recipe, external model downloads, and insufficient validation of filesystem paths if inputs are untrusted. The MusicGen fallback also appears broken by Python syntax errors.
Confidence: 97%Severity: 53%
Audit Metadata