triage-e2e-test
Audited by Socket on Jul 30, 2026
1 alert found:
AnomalyThis module does not itself show overt malware behavior (no networking, no obfuscated payloads, no credential handling, no persistence). However, it exports high-impact primitives: arbitrary external command execution (via execFileSync through runNode/tryRun) and arbitrary filesystem read/write (via readJson/writeJson/writeText on caller-provided paths) without input validation or directory confinement. If any attacker-controlled data can reach these exported functions (directly or through other modules), the overall security risk becomes materially elevated (potential RCE and/or path traversal/write). If used strictly with trusted internal inputs in a controlled CI/triage environment, risk is lower.