pindou-pattern
Warn
Audited by Socket on Sep 24, 2026
1 alert found:
AnomalyAnomalyscripts/_extract.js
LOWAnomalyLOW
scripts/_extract.js
This appears to be a local data-extraction utility, not evident malware. Its direct use of eval on a user-selected file is a significant code-execution risk if that file is untrusted. The pasted version also contains a syntax error in the header string.
Confidence: 99%Severity: 68%
Audit Metadata