xlsx-offline

Warn

Audited by Socket on Mar 9, 2026

1 alert found:

Anomaly
AnomalyLOW
recalc.py

This module intentionally writes a LibreOffice macro into a user profile and invokes LibreOffice to execute it against a provided Excel file, then reports recalculation results. The code is not obviously obfuscated and does not contain hardcoded credentials, but it performs a high-risk operation: installing and executing a macro in a user's LibreOffice profile, which can be abused to run arbitrary code or maintain persistence, especially when run without isolated mode. The provided snippet is syntactically incomplete because macro_content is missing; without the macro body we cannot determine whether the macro itself is malicious. Treat this package as potentially dangerous until macro contents are audited. Recommended actions: inspect the Module1.xba macro content before running, prefer isolated temporary profiles, avoid --no-isolated on untrusted builds, and review process invocation environment.

Confidence: 90%Severity: 60%
Audit Metadata
Analyzed At
Mar 9, 2026, 08:41 PM
Package URL
pkg:socket/skills-sh/okwinds%2Fmiscellany%2Fxlsx-offline%2F@edb7f1e8bc679a18c8da6728749023caecfe1c8a