dm8-tools
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyscripts/dm8_query.py
LOWAnomalyLOW
scripts/dm8_query.py
No clear malicious payload or supply-chain backdoor is present. The code is a database administration/query utility, but it has significant security impact by design: it accepts arbitrary SQL, supports privileged SYSDBA use, commits write operations, and exposes passwords through command-line arguments. The code should be restricted to trusted users and preferably use least-privileged accounts, secure secret handling, explicit read-only controls, and reliable finally-based resource cleanup. The shown fragment is syntactically incomplete.
Confidence: 98%Severity: 68%
Audit Metadata