NYC

bun-package-manager

Pass

Audited by Socket on Feb 14, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Feb 14, 2026, 06:05 PM
Package URL
pkg:socket/skills-sh/thebushidocollective%2Fhan%2Fbun-package-manager%2F@3fafbddd72daf3709690d6c9ed442b2b1e84869b