huawei-cloud-monitoring-query
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalyscripts/ensure_env.py
LOWAnomalyLOW
scripts/ensure_env.py
No clear malicious behavior is shown. The significant security concern is disabled TLS certificate verification, especially for downloading and executing get-pip.py; this can permit a man-in-the-middle attacker to supply executable code. Dependency installation and sudo package-manager use also have expected but consequential system effects.
Confidence: 97%Severity: 57%
Audit Metadata