team-lead
Warn
Audited by Socket on Oct 13, 2026
1 alert found:
AnomalyAnomalyscripts/stall-watch.sh
LOWAnomalyLOW
scripts/stall-watch.sh
The script is a Herdr stall-monitoring utility, not apparent malware. Its main security risk is executing sourced state files from a configurable directory that may be in `/tmp`; protect that directory and its files from untrusted modification, or replace shell sourcing with non-executable data parsing. Treat `--busy-if` as trusted shell input.
Confidence: 97%Severity: 56%
Audit Metadata