kryptogo-pay-webhook
Warn
Audited by Socket on Oct 3, 2026
1 alert found:
SecuritySecurityreferences/code-examples.md
MEDIUMSecurityMEDIUM
references/code-examples.md
No clear malware is present. These are payment webhook examples with a significant security omission: without sender authentication or signature verification, forged callbacks may mark orders paid or alter payment/refund records. Treat them as unsafe to deploy as-is; verify provider signatures and validate callback values against the order and provider data.
Confidence: 98%Severity: 78%
Audit Metadata