paymeuz-clickuz-master
Fail
Audited by Socket on Feb 27, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
This repository is a documentation + reference implementation for Payme.uz and Click.uz integrations in NestJS. It does not contain malware or supply-chain download/execute patterns. The main security considerations are implementation-level: protect secret config variables, avoid logging sensitive webhook payloads in plaintext, implement secure Base64 decoding (Buffer.from(..., 'base64') in Node), handle MD5 verification per provider while safeguarding keys, and implement business logic hooks carefully to avoid unintended side effects. Overall low risk from malicious intent but moderate operational risk if integrated carelessly.
Confidence: 95%Severity: 90%
Audit Metadata