apple-app-store-reviewer
Fail
Audited by Socket on Aug 26, 2026
1 alert found:
MalwareMalwaretests/fixtures/project-bad/App.swift
HIGHMalwareHIGH
tests/fixtures/project-bad/App.swift
This fragment contains multiple high-risk supply-chain indicators: a credential-like hardcoded token and an explicit `dlopen` call to load a native library at runtime. Even without additional exfiltration/network/file behavior shown in the excerpt, runtime native library loading is a powerful arbitrary code execution primitive and is strongly consistent with malware/backdoor scaffolding. The snippet should be treated as suspicious and requires full context review of call paths, library resolution/location, and whether/where the token/endpoint are used.
Confidence: 65%Severity: 92%
Audit Metadata