android-emulator
Warn
Audited by Socket on May 7, 2026
1 alert found:
AnomalyAnomalytests/stubs/convert
LOWAnomalyLOW
tests/stubs/convert
This fragment is a deliberately stubbed `convert` that spoofs `--version`, logs all provided arguments to a configurable location, and truncates/creates the last argument as a filesystem path. While it shows no direct network exfiltration or obvious malware capabilities, it introduces meaningful security risk through potential arbitrary file overwrite/truncation (caller-controlled path) and possible leakage of sensitive invocation arguments into logs. In a supply-chain context, such a stub can also sabotage expected build/runtime behavior if substituted for the real dependency.
Confidence: 72%Severity: 64%
Audit Metadata