ns-langgraph-agents
Warn
Audited by Socket on Sep 8, 2026
1 alert found:
AnomalyAnomalytemplates/agent-runtime/tests/setup.ts
LOWAnomalyLOW
templates/agent-runtime/tests/setup.ts
No explicit malicious payload (exfiltration, command execution, or persistence) is present in this fragment. However, it performs high-impact configuration tampering: disables LangChain tracing and LLM usage, forces in-memory checkpointing, and deletes likely sensitive/required environment variables (API key and database URL). This behavior is consistent with intentional disruption/disablement (sabotage or stealth of observability), and should be treated as a security concern if unexpected in the dependency’s expected role.
Confidence: 74%Severity: 62%
Audit Metadata