memory-view
Warn
Audited by Socket on Jun 27, 2026
1 alert found:
AnomalyAnomalyscripts/lib/render-all.ts
LOWAnomalyLOW
scripts/lib/render-all.ts
No clear evidence of classic malware is present in this fragment itself (no network/process/FS actions, no dynamic eval). However, the module has meaningful security risk because it (1) embeds and executes imported client-side JavaScript via `<script>${JS}</script>` (trust depends on `./assets.ts`), and (2) relies on unseen rendering helpers (`memRow`, `renderFindingCard`) to safely encode potentially memory-derived/untrusted text into HTML. Additionally, it may embed raw sensitive memory-derived content depending on redaction state, creating a high privacy/handling risk for shared outputs.
Confidence: 55%Severity: 56%
Audit Metadata