atuin
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalyreferences/sync-setup.md
LOWAnomalyLOW
references/sync-setup.md
No direct malicious behavior is evident in this documentation. The content describes legitimate Atuin synchronization setup, but several instructions create security exposure: direct execution of an unverified remote installer, mutable `latest` images, open registration, publicly bound services, a weak hardcoded database password, plaintext key backups, and optional HTTP synchronization. These should be hardened before production use.
Confidence: 98%Severity: 62%
Audit Metadata