git-prefs
Warn
Audited by Socket on Nov 8, 2026
1 alert found:
AnomalyAnomalyscripts/empty-worktree.mjs
LOWAnomalyLOW
scripts/empty-worktree.mjs
This script deliberately removes all contents of the current linked Git worktree, then writes a placeholder and attempts to prune its Git worktree registration. Its root and linked-worktree checks reduce accidental scope, and --dry-run is available, but normal execution causes substantial data loss within that worktree. No credential theft, network exfiltration, or other malware behavior is evident; treat it as a high-impact destructive utility and run only when that deletion is intended.
Confidence: 99%Severity: 55%
Audit Metadata