faker-data
Warn
Audited by Socket on Oct 12, 2026
1 alert found:
SecuritySecurityevals/staging-emails-reach-real-mailboxes/task.md
MEDIUMSecurityMEDIUM
evals/staging-emails-reach-real-mailboxes/task.md
The code contains no evidence of intentional malware or obfuscation, but it has a clear operational safety risk: seeding can send welcome emails to Faker-generated real addresses through the configured relay. The factory also generates work addresses at a real company domain and potentially resolvable website URLs. The requested domain-safety constraints and deterministic large-sample test are not implemented in the supplied code.
Confidence: 99%Severity: 86%
Audit Metadata