Homebrew / homebrew-core

1. high Semgrep Found a potentially user-controllable argument in the construction of a regular expressions. This may result in excessive resource consumption when applied to certain inputs, or when the user is allowed to control the match target. Avoid allowing users to specify regular expressions processed by the server. If you must support user-controllable input in a regular expression, use an allow-list to restrict the expressions users may supply to limit catastrophic backtracking. /Formula/u/unibilium.rb:61 100%
2. high GuardDog Detects cryptocurrency mining activity [threat-process-cryptomining] /Formula/x/xmrig.rb:1 97%
3. high GuardDog Detects cryptocurrency mining activity [threat-process-cryptomining] /Formula/m/monero.rb:2 97%
4. high GuardDog Detects cryptocurrency mining activity [threat-process-cryptomining] /Formula/m/monero.rb:58 96%
5. high Semgrep Generic API Key detected /Formula/f/fred.rb:54 52%
6. high Semgrep Generic Secret detected /Formula/m/mdz.rb:44 51%
7. high Semgrep Generic Secret detected /Formula/g/garage.rb:51 51%
8. high Semgrep Generic Secret detected /Formula/m/mdz.rb:35 50%
9. high Semgrep Generic Secret detected /Formula/o/oauth2c.rb:35 50%
10. high Semgrep Generic Secret detected /Formula/o/oauth2_proxy.rb:52 50%
11. high Semgrep Insecure WebSocket Detected. WebSocket Secure (wss) should be used for all WebSocket connections. /Formula/w/wstunnel.rb:39 50%
12. high Semgrep JWT token detected /Formula/j/jwt-hack.rb:31 50%
13. high Semgrep bcrypt hash detected /Formula/p/portable-libxcrypt.rb:45 49%
14. high Semgrep bcrypt hash detected /Formula/lib/libxcrypt.rb:58 49%
15. high Semgrep Private Key detected. This is a sensitive credential and should not be hardcoded here. Instead, store this in a separate, private file. /Formula/t/trojan-go.rb:98 45%
16. high YARA YARA rule matched: detect_crypto_miner — Cryptocurrency mining pool connection patterns /.git/index 36%
17. high YARA YARA rule matched: detect_crypto_miner — Cryptocurrency mining pool connection patterns /Formula/x/xmrig.rb 36%
18. high YARA YARA rule matched: detect_crypto_miner — Cryptocurrency mining pool connection patterns /audit_exceptions/head_non_default_branch_allowlist.json 36%
19. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /Formula/o/openbao.rb 1%
20. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /Formula/c/condure.rb 1%
21. high YARA YARA rule matched: detect_download_and_execute — Downloads a remote resource AND executes it - the actually dangerous combination, not just downloading alone /Formula/t/tirith.rb 1%
22. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-git-prompt.rb 0%
23. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zplug.rb 0%
24. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-vi-mode.rb 0%
25. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zinit.rb 0%
26. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-system-clipboard.rb 0%
27. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/z.lua.rb 0%
28. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-you-should-use.rb 0%
29. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/z.rb 0%
30. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-completions.rb 0%
31. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/b/bash.rb 0%
32. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/h/homeshick.rb 0%
33. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/l/lesspipe.rb 0%
34. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/l/liquidprompt.rb 0%
35. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/l/lunchy-go.rb 0%
36. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/b/bash-preexec.rb 0%
37. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/b/bash-completion@2.rb 0%
38. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/b/bash-completion.rb 0%
39. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-autocomplete.rb 0%
40. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-history-substring-search.rb 0%
41. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-patina.rb 0%
42. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-navigation-tools.rb 0%
43. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-history-enquirer.rb 0%
44. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/b/bash-git-prompt.rb 0%
45. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/j/jenv.rb 0%
46. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/k/kics.rb 0%
47. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/k/kube-ps1.rb 0%
48. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/w/wildfly-as.rb 0%
49. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/a/autojump.rb 0%
50. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/a/antidote.rb 0%
51. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/a/antigen.rb 0%
52. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/f/fzf-tab.rb 0%
53. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/g/git-extras.rb 0%
54. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/g/guile-gnutls.rb 0%
55. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/g/gawk.rb 0%
56. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/g/glassfish.rb 0%
57. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/g/geometry.rb 0%
58. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/g/guile.rb 0%
59. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/j/jabba.rb 0%
60. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-fast-syntax-highlighting.rb 0%
61. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/y/yubikey-agent.rb 0%
62. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/c/chruby.rb 0%
63. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/c/csound.rb 0%
64. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/p/perl.rb 0%
65. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/p/plenv.rb 0%
66. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/d/docbook.rb 0%
67. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/p/powerlevel10k.rb 0%
68. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/p/payara.rb 0%
69. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/p/piknik.rb 0%
70. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-autosuggestions.rb 0%
71. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-syntax-highlighting.rb 0%
72. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-f-sy-h.rb 0%
73. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zimfw.rb 0%
74. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/z/zsh-autopair.rb 0%
75. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/n/nfd2nfc.rb 0%
76. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/l/lunchy.rb 0%
77. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/t/tkey-ssh-agent.rb 0%
78. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/t/thefuck.rb 0%
79. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/r/resty.rb 0%
80. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/u/uru.rb 0%
81. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/h/hermit.rb 0%
82. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/h/haxe.rb 0%
83. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/s/socktainer.rb 0%
84. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/m/modules.rb 0%
85. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/v/virtualenvwrapper.rb 0%
86. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/n/nvm.rb 0%
87. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/n/neko.rb 0%
88. high YARA YARA rule matched: detect_persistence_mechanism — Modifies a startup/scheduling location - legitimate application code essentially never does this /Formula/s/spaceship.rb 0%
89. medium Semgrep Detected non-static command inside PTY.spawn. Audit the input to 'PTY.spawn'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/n/nak.rb:39 100%
90. medium Semgrep Detected non-static command inside system. Audit the input to 'system'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/l/lpeg.rb:30 100%
91. medium Semgrep Detected non-static command inside system. Audit the input to 'system'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/l/llvm.rb:488 100%
92. medium Semgrep Detected non-static command inside system. Audit the input to 'system'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/l/llvm.rb:485 100%
93. medium Semgrep Detected non-static command inside system. Audit the input to 'system'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/l/llvm.rb:469 100%
94. medium Semgrep Detected non-static command inside system. Audit the input to 'system'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/l/llvm.rb:464 100%
95. medium Semgrep Detected non-static command inside system. Audit the input to 'system'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/l/latexml.rb:232 100%
96. medium Semgrep Detected non-static command inside system. Audit the input to 'system'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/k/kafka.rb:71 100%
97. medium Semgrep Detected non-static command inside system. Audit the input to 'system'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/g/gitup.rb:46 100%
98. medium Semgrep Detected non-static command inside system. Audit the input to 'system'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/d/dotnet.rb:149 100%
99. medium Semgrep Detected non-static command inside system. Audit the input to 'system'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/c/copier.rb:113 100%
100. medium Semgrep Should not use SHA1 to generate hashes. There is a proven SHA1 hash collision by Google, which could lead to vulnerabilities. Use SHA256, SHA3 or other hashing functions instead. /Formula/g/grokmirror.rb:62 100%
101. medium Semgrep Should not use SHA1 to generate hashes. There is a proven SHA1 hash collision by Google, which could lead to vulnerabilities. Use SHA256, SHA3 or other hashing functions instead. /Formula/d/dzr.rb:25 100%
102. medium GuardDog Detects URLs to suspicious domains often used for exfiltration or C2 [threat-network-exfiltration] /Formula/l/lazy-tmux.rb:3 98%
103. medium GuardDog Detects URLs to suspicious domains often used for exfiltration or C2 [threat-network-exfiltration] /Formula/j/jimtcl.rb:3 98%
104. medium GuardDog Detects URLs to suspicious domains often used for exfiltration or C2 [threat-network-exfiltration] /Formula/h/haste-client.rb:3 98%
105. medium GuardDog Detects URLs to suspicious domains often used for exfiltration or C2 [threat-network-exfiltration] /Formula/h/hapless.rb:5 98%
106. medium GuardDog Detects URLs to suspicious domains often used for exfiltration or C2 [threat-network-exfiltration] /Formula/g/gopass.rb:3 98%
107. medium GuardDog Detects URLs to URL shorteners, file sharing, and suspicious services [threat-network-outbound-shady-links] /Formula/c/cidr2range.rb:3 97%
108. medium GuardDog Detects URLs to URL shorteners, file sharing, and suspicious services [threat-network-outbound-shady-links] /Formula/g/grepip.rb:3 97%
109. medium GuardDog Detects URLs to URL shorteners, file sharing, and suspicious services [threat-network-outbound-shady-links] /Formula/g/grepip.rb:3 97%
110. medium GuardDog Detects URLs to URL shorteners, file sharing, and suspicious services [threat-network-outbound-shady-links] /Formula/h/haste-client.rb:3 97%
111. medium GuardDog Detects URLs to URL shorteners, file sharing, and suspicious services [threat-network-outbound-shady-links] /Formula/i/ipinfo-cli.rb:3 97%
112. medium Semgrep Detected non-static command inside `...`. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/f/freerdp.rb:93 57%
113. medium Semgrep Detected non-static command inside `...`. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/i/ipinfo-cli.rb:38 57%
114. medium Semgrep Detected non-static command inside `...`. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/p/portable-ruby.rb:161 57%
115. medium Semgrep Detected non-static command inside `...`. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/o/ocrad.rb:46 56%
116. medium Semgrep Detected non-static command inside `...`. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/f/fplll.rb:32 56%
117. medium Semgrep Detected non-static command inside `...`. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/f/fplll.rb:35 56%
118. medium Semgrep Detected non-static command inside `...`. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/t/tty-share.rb:29 56%
119. medium Semgrep Detected non-static command inside `...`. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/t/tag.rb:35 56%
120. medium Semgrep Detected non-static command inside `...`. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/p/portable-ruby.rb:162 56%
121. medium Semgrep Detected non-static command inside `...`. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/p/passenger.rb:126 56%
122. medium Semgrep Detected non-static command inside `...`. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. /Formula/g/gitup.rb:82 56%
123. low GuardDog Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read] /Formula/b/b4.rb:91 91%
124. low GuardDog Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read] /Formula/b/b4.rb:90 91%
125. low GuardDog Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read] /Formula/b/bagel.rb:49 91%
126. low GuardDog Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read] /Formula/c/container-structure-test.rb:48 91%
127. low GuardDog Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read] /Formula/a/autoenv.rb:27 91%
128. low YARA YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version /Formula/l/leaps.rb 0%
129. low YARA YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version /Formula/p/pushpin.rb 0%
130. low YARA YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version /Formula/c/condure.rb 0%
131. low YARA YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version /Formula/g/ghostunnel.rb 0%
132. low YARA YARA rule matched: detect_downloader — Downloads a remote resource - common and low-signal alone; see detect_download_and_execute for the composite version /Formula/w/wget.rb 0%

No findings match these filters. Clear filters