chaos-engineer
Warn
Audited by Socket on Mar 27, 2026
1 alert found:
SecuritySecurityreferences/infrastructure-chaos.md
MEDIUMSecurityMEDIUM
references/infrastructure-chaos.md
Best report: Report 2 is the most balanced overall. Improved summary: This dependency is a chaos-engineering toolkit that intentionally performs high-impact disruption (AWS instance termination, ASG scaling suspension, ELB target deregistration, stress-ng/iperf3 saturation, and Pumba container kills and netem impairments). It does not show classic malware behaviors (no exfiltration/persistence/backdoors), but it carries substantial operational risk if used outside a tightly controlled testing environment. Additionally, DNSChaos.block_domain uses sudo sh -c with interpolated `domain`, creating a potential command-injection vector if input is not strictly validated.
Confidence: 78%Severity: 74%
Audit Metadata