pindou-pattern

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/_extract.js

This appears to be a local data-extraction utility, not evident malware. Its direct use of eval on a user-selected file is a significant code-execution risk if that file is untrusted. The pasted version also contains a syntax error in the header string.

Confidence: 99%Severity: 68%
Audit Metadata
Analyzed At
Sep 24, 2026, 01:07 AM
Package URL
pkg:socket/skills-sh/liangdabiao%2Fperler-beads-skill%2Fpindou-pattern%2F@be27e6064f8bd9b63a92bd5fccaebbb55ba96ad6