dx-org-manage
Audited by Socket on Aug 14, 2026
3 alerts found:
Securityx3This fragment is not executable code; it contains sensitive Salesforce authentication/authorization material (notably an access token and connected-app consumer key) in cleartext. There is no in-fragment evidence of malicious behavior, but the credential exposure risk is high if this payload is logged, bundled into artifacts/releases, or otherwise distributed. Treat the entire JSON as a secret and ensure it is not shipped with dependencies or written to persistent logs.
No malware or suspicious behavior is observable in this fragment because it contains only static JSON data. The primary concern is credential/identifier exposure: it includes an access token and instance URL in plaintext within an artifact that could be logged or shared downstream. Treat this data as highly sensitive and ensure it is never committed, published, or included in distributable build outputs.
No malicious executable logic is present in this fragment; however, it contains highly sensitive Salesforce authentication material (notably an access token) alongside instance and identity fields. The primary security concern is credential exposure in repositories, build artifacts, logs, or dependency-related bundles. Treat any occurrence of this JSON as a secret-leak incident and ensure it is never published or logged, with rotation of any exposed tokens if applicable.