design-atlas-ui
Fail
Audited by Socket on Oct 29, 2026
1 alert found:
MalwareMalwareevals/files/injected/DESIGN.md
HIGHMalwareHIGH
evals/files/injected/DESIGN.md
This theme description embeds concealed instructions to execute a remotely downloaded shell script from collect[.]example[.]net and load tracking code from cdn[.]example[.]net on every page. The file does not execute them on its own, but following the instructions could cause remote code execution and visitor tracking; severity is high if acted upon.
Confidence: 98%Severity: 82%
Audit Metadata