yb-model
Warn
Audited by Socket on Oct 12, 2026
1 alert found:
AnomalyAnomalyscripts/ybm/catalog.py
LOWAnomalyLOW
scripts/ybm/catalog.py
The fragment appears to implement database dump replay and catalog extraction, not malware. It has SQL-injection risks in interpolated database identifiers and generated repair statements, with potentially destructive effects if inputs are attacker-controlled. The shown syntax error prevents execution as provided.
Confidence: 99%Severity: 58%
Audit Metadata