Automic VaultAutomic Vault

brew / 排名 9053

安装 sh4d0wup

查看 sh4d0wup 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

安装

使用 Automic Vault 安装

Automic Vault
下载 AV
sudo av install brew:sh4d0wup

macOS

Homebrewverified · 100%
brew install sh4d0wup

local Homebrew formula metadata

Linux

Nixverified · 92%
nix profile install nixpkgs#sh4d0wup

nixpkgs package indexes · pkgs/by-name/sh/sh4d0wup/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S sh4d0wup

Arch Linux sync databases · sh4d0wup · source: geo.mirror.pkgbuild.com

平台说明

  • 没有特定于此软件包的平台说明。

概览

软件包摘要

Signing-key abuse and update exploitation framework

命令和别名

  • sh4d0wup

安全态势

风险级别：red

escape, surveillance, or offensive capability signal.

Risk classifier

red risk · medium confidence · escape-surveillance-offensive

Why

  • escape, surveillance, or offensive capability signal

Signals

  • text:exploit

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 8 platform targets.
  • Installs with 4 runtime dependencies.
  • Build metadata lists 3 build dependencies.

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
sh4d0wupcliglobal executable

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-06-10
管理器版本0.11.0
管理器更新时间2026-04-25
本地数据ok
上游current
检测到的最新版本v0.11.0

https://github.com/kpcyrd/sh4d0wup

  • okNo freshness warnings were generated.

安装元数据

软件包元数据

Package keybrew:sh4d0wup
Version0.11.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/sh4d0wup
Homepagehttps://github.com/kpcyrd/sh4d0wup
Repositoryhttps://github.com/kpcyrd/sh4d0wup
Upstream docshttps://github.com/kpcyrd/sh4d0wup#readme
LicenseGPL-3.0-or-later
Source archivehttps://github.com/kpcyrd/sh4d0wup/archive/refs/tags/v0.11.0.tar.gz
Last updated2026-04-25T12:16:17-07:00
Pulseupdated
Dependenciesopenssl@3, pcsc-lite, xz, zstd
Build dependenciesllvm, pkgconf, rust
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namesh4d0wup
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

sh4d0wup

nix profile install nixpkgs#sh4d0wup
  • normalized package name match
  • Matched by: Sh4d0wup
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/sh/sh4d0wup/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
pacman95%

sh4d0wup 0.11.0-2

Signing-key abuse and update exploitation framework

https://github.com/kpcyrd/sh4d0wup

sudo pacman -S sh4d0wup
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • 13 dependencies
  • normalized package name match
  • Matched by: Sh4d0wup
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: sh4d0wup from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

相关工具

  • openssl@3Runtime dependency declared by Homebrew.
  • xzRuntime dependency declared by Homebrew.
  • zstdRuntime dependency declared by Homebrew.
  • pcsc-liteRuntime dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.
  • llvmBuild dependency declared by Homebrew.
  • rustBuild dependency declared by Homebrew.

相同工作流

  • malcontentShares av.db curated category or tags: cli, security, supply-chain-security.
  • minderShares av.db curated category or tags: cli, security, supply-chain-security.
  • cosignShares av.db curated category or tags: cli, security, supply-chain-security.
  • zizmorShares av.db curated category or tags: cli, security, supply-chain-security.
  • rustscanShares av.db curated category or tags: cli, rust, security.
  • feroxbusterShares av.db curated category or tags: cli, rust, security.

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment