transformers-js

Pass

Audited by Socket on Sep 16, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Sep 16, 2026, 01:29 PM

Package URL

pkg:socket/skills-sh/huggingface%2Ftransformers.js%2Ftransformers-js%2F@bde7e3296008324fe257fac298bc095c0bd8b5cb478ac605242cddcbae58beb0