peer-sessions
Warn
Audited by Socket on Sep 8, 2026
1 alert found:
AnomalyAnomalyscripts/cmux_fleet.py
LOWAnomalyLOW
scripts/cmux_fleet.py
This module appears to be a legitimate cmux-based terminal fleet launcher/teardown orchestrator, with no clear indicators of stealth malware (no network activity, credential access, obfuscation, or persistence logic in this fragment). However, it intentionally performs high-impact command execution: it converts manifest-provided argv into a shell command string and injects it into terminal sessions via cmux 'send'. Therefore the security posture is dominated by trust in the manifest/state inputs and the execution environment; under compromised/untrusted inputs, the tool can execute arbitrary commands in spawned terminals and may close unintended sessions during teardown.
Confidence: 66%Severity: 62%
Audit Metadata