pptx-win
Warn
Audited by Socket on Aug 16, 2026
1 alert found:
AnomalyAnomalyscripts/office/unpack.py
LOWAnomalyLOW
scripts/office/unpack.py
No clear evidence of intentional malware, tracking, credential theft, or network-based exfiltration in this fragment. The primary security weakness is use of zipfile.ZipFile.extractall(output_path) on an untrusted Office ZIP without validating member paths, enabling potential ZIP Slip/path traversal and arbitrary file write outside the chosen output directory. Additional risk could be introduced by the unseen DOCX helper functions, but that behavior is not assessable from this module alone.
Confidence: 72%Severity: 64%
Audit Metadata