databricks-python-sdk
Audited by Socket on Aug 11, 2026
1 alert found:
AnomalyThis code fragment is best characterized as a high-privilege Databricks administrative automation script that enumerates and manages Unity Catalog/Volumes and performs file upload/download/delete via Databricks Volumes. It contains no clear supply-chain malware signals (no obfuscation, no exec/subprocess, no secret harvesting, no suspicious external network destinations), but it does include substantial operational danger: broad create/update/delete operations, destructive deletes (catalog/schema/table/volume/file), hardcoded identifiers/ownership values, and overwrite=True for uploads. The file transfer capabilities could be used for data exfiltration or disruption if run with privileged credentials or in the wrong environment. The provided snippet also appears truncated near the final delete call, slightly reducing assessment confidence.