critical
suspicious.dangerous_exec
- Location
- dist/mcp-proxy.mjs:89
- Finding
- Shell command execution detected (child_process).
- Evidence
const child = spawn(target.command, target.args, createTargetSpawnOptions());
ACPX Runtime
AdvisoryAudited by Static analysis on May 20, 2026.
Overview
Detected: suspicious.dangerous_exec
Findings (3)
critical
suspicious.dangerous_exec
- Location
- dist/process-reaper-COS-4a3C.js:229
- Finding
- Shell command execution detected (child_process).
- Evidence
const match = /^\s*(?<pid>\d+)\s+(?<ppid>\d+)\s+(?<command>.+?)\s*$/.exec(line);
critical
suspicious.dangerous_exec
- Location
- dist/service-CwQtIjhe.js:120
- Finding
- Shell command execution detected (child_process).
- Evidence
const assignment = /^(?<key>"(?:\\.|[^"\\])*"|'[^']*'|[A-Za-z0-9_\-/.~:]+)\s*=\s*(?<value>.+)$/.exec(line);