creator-teardown
Warn
Audited by Socket on Oct 14, 2026
1 alert found:
AnomalyAnomalyscripts/_progress.py
LOWAnomalyLOW
scripts/_progress.py
The code is a local progress-reporting helper with a demo. It contains no evident malware or obfuscation. However, if an attacker can modify state.json, its home_py field can select an arbitrary Python file for execution when a matching active job passes the checks. Risk depends on the integrity protections around that state file.
Confidence: 97%Severity: 62%
Audit Metadata