data-visualization
Audited by Socket on Feb 25, 2026
1 alert found:
MalwareThis package is primarily documentation and runnable examples for data visualization using a remote executor (inference.sh). The code samples are benign and non-obfuscated. The dominant security concerns are supply-chain and data-exposure risks introduced by the recommended install pattern (curl | sh), remote execution of user-supplied payloads, and broad CLI permissions (allowed-tools: Bash(infsh *)). There are no hardcoded secrets or clear indicators of intentionally malicious code in the provided file. Recommended mitigations: avoid piping unknown install scripts to a shell, perform checksum verification manually or use package manager installs when possible, do not include secrets or PII in infsh payloads, limit CLI permissions, and prefer local execution for sensitive data.