video-analysis
Warn
Audited by Socket on May 5, 2026
1 alert found:
AnomalyAnomaly_postplus_shared/00-core/shared-runtime/scripts/lib/hosted_media_generation_bridge.mjs
LOWAnomalyLOW
_postplus_shared/00-core/shared-runtime/scripts/lib/hosted_media_generation_bridge.mjs
No clear evidence of intentional malware/backdoor behavior is present in this module alone. However, it provides powerful capabilities: it can read arbitrary local files (via resolved localFilePath) and write arbitrary files (via resolved outputPath) using remote-provided base64 content, with minimal validation/containment. If upstream callers or the bridge supply untrusted paths/urls/content, this can enable data exfiltration (upload) and unintended file overwrite or persistence-like impact (download).
Confidence: 62%Severity: 63%
Audit Metadata