critical
suspicious.dangerous_exec
- Location
- assets/scripts/cdn-setup.mjs:28
- Finding
- Shell command execution detected (child_process).
Marketing Site Dev
AdvisoryAudited by Static analysis on May 17, 2026.
Overview
Detected: suspicious.dangerous_exec, suspicious.env_credential_access
Findings (3)
critical
suspicious.env_credential_access
- Location
- assets/scripts/deploy.mjs:41
- Finding
- Environment variable access combined with network send.
critical
suspicious.env_credential_access
- Location
- assets/scripts/lib/volc-api.mjs:21
- Finding
- Environment variable access combined with network send.