node-red
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalyassets/templates/mqtt_flow.json
LOWAnomalyLOW
assets/templates/mqtt_flow.json
The fragment appears to implement a sensor MQTT integration rather than intentional malware. However, the processed-data output republishes to the input topic, creating a potentially unbounded MQTT feedback loop and denial-of-service risk. Topic-derived object keys also create a prototype-manipulation concern. Configure a distinct output topic or otherwise prevent reprocessing, and validate or safely store sensor IDs.
Confidence: 98%Severity: 68%
Audit Metadata