ethical-redteam-bugbounty
Warn
Audited by Socket on Apr 9, 2026
1 alert found:
AnomalyAnomalyscripts/install.sh
LOWAnomalyLOW
scripts/install.sh
This installer script is a legitimate-sounding setup tool for Red Team/OSINT tooling. It does not contain obvious backdoors, credential theft, obfuscation, or direct exfiltration. However, it performs risky operations: executing a remote Homebrew installer via curl|bash, eval'ing strings, running sudo package installs, cloning remote repositories and installing pip/go modules without integrity checks. Those actions constitute a non-trivial supply-chain risk — if upstream sources are compromised the system could be compromised. The script should only be run in trusted, controlled environments and after auditing/verifying the remote resources it fetches.
Confidence: 90%Severity: 60%
Audit Metadata