tia-import-export
Audited by Socket on Jun 16, 2026
1 alert found:
AnomalyThis code is primarily a TIA Portal Openness export/import utility that serializes HMI configuration objects to XML files and re-ingests them into a target engineering project. It contains no overt classic malware behavior (no network/process execution/obfuscation), but it does carry meaningful supply-chain integrity risk: it imports attacker-tampered XML using ImportOptions.Override and it supports importing VB script artifacts into the TIA project, which could introduce malicious/undesired executable logic depending on how TIA handles imported scripts. Additionally, export filename construction uses unvalidated project object names in filesystem paths, which could enable unintended file writes if names contain special path characters.