frevana-auth

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The script can run the command "npm i -g @frevana/frevana" at runtime, which fetches and installs remote code (from the npm registry) and results in executing the installed CLI (frevana), so this runtime dependency (npm i -g @frevana/frevana) can execute remote code and is required if the CLI is missing.