mongodb-crud
Warn
Audited by Socket on Jul 15, 2026
1 alert found:
AnomalyAnomalyscripts/mongodb_crud.sh
LOWAnomalyLOW
scripts/mongodb_crud.sh
No definitive evidence of hidden malware (no overt exfiltration targets, persistence, or backdoor behavior in this snippet). However, the module contains two high-impact execution primitives: it `source`s profile files (local Bash code execution if profiles are tampered with) and it executes arbitrary MongoDB shell JavaScript via `mongosh --eval` (especially through `raw-eval`, and also through JS generation for CRUD operations). Treat profile provenance and eval/inputs as fully trusted; otherwise, the security risk is substantial even if the tool is legitimate.
Confidence: 65%Severity: 65%
Audit Metadata