dcg
Fail
Audited by Socket on Jun 3, 2026
1 alert found:
MalwareMalwaretests/golden/artifacts/explain/heredoc_python_rmtree.json
HIGHMalwareHIGH
tests/golden/artifacts/explain/heredoc_python_rmtree.json
This fragment is a destructive operation: it unconditionally deletes `/home/example/project` recursively via `shutil.rmtree()` executed through an inline `python3` heredoc. While no exfiltration or credential theft is present in the shown code, the lack of safety checks and hardcoded absolute path make it strongly indicative of potential sabotage in a build/install context. Additional surrounding code/installer context is needed to confirm whether it is legitimate cleanup or malicious behavior.
Confidence: 78%Severity: 85%
Audit Metadata