local-video-production-m5
Warn
Audited by Socket on Oct 22, 2026
1 alert found:
AnomalyAnomalyscripts/m5_env_check.sh
LOWAnomalyLOW
scripts/m5_env_check.sh
This diagnostic script checks ComfyUI, llama-server, model files, and local MPS status. It contains a hardcoded SSH password and disables host-key verification while connecting to joergpeetz@192[.]168[.]212[.]46, creating a material credential-exposure and man-in-the-middle risk. The visible commands do not indicate malware or unrelated data theft; severity is moderate due to embedded credentials and unauthenticated host identity.
Confidence: 98%Severity: 55%
Audit Metadata