huawei-cloud-obs-upload
Audited by Socket on Jun 26, 2026
1 alert found:
AnomalyThis code fragment implements a transparent, scheduled directory uploader (backup/sync style) that repeatedly transfers a user-chosen local directory to a user-specified OBS bucket/prefix and writes execution logs to $HOME. No clear malware indicators (obfuscation, credential theft, covert networking, or hidden execution) are present. The main security concerns are (1) high-impact data exfiltration capability by design if misused, and (2) missing demonstrated input escaping/quoting when embedding user-supplied parameters into shell/PowerShell commands, which could cause unintended behavior or injection in a generation context. Review and harden parameter sanitization/quoting and ensure deterministic execution paths (e.g., full obsutil path).