github

Fail

Audited by Socket on Oct 28, 2026

1 alert found:

Malware
MalwareHIGH
scripts/git-credential-token.py

This module is a high-confidence credential-harvesting utility. It reads a likely secret store (~/.git-credentials or a provided path), parses GitHub HTTPS credential URLs, percent-decodes username/password fields, recognizes GitHub token formats, and immediately prints the recovered token to stdout. Even without visible network exfiltration in this fragment, it directly facilitates theft/disclosure and should be treated as highly unsafe in a software supply chain context.

Confidence: 88%Severity: 90%
Audit Metadata
Analyzed At
Oct 28, 2026, 10:59 AM
Package URL
pkg:socket/skills-sh/nousresearch%2Fhermes-agent%2Fgithub%2F@ad99744f9a9c0be810818c180e629fb1ef3f48e4