@turbo/linux-64
The linux-x64 binary for turbo, a monorepo build system.
89%
Total Score
healthy
Active releases, organization backing, and a strong repository make this a healthy binary package despite minor workflow and identity gaps.
Health Score Breakdown
The repository name does not match the platform package and its README does not mention this exact package, creating some uncertainty about the package-to-repository mapping; the package is nevertheless presented as a Turborepo platform binary.
All 12 workflows were analyzed with no unpinned actions, untrusted checkouts, or script-injection findings. The audit still reports a high-confidence template-injection finding, several secrets-inherit and ad hoc package findings, and one workflow with top-level write permissions, so workflow hygiene is not perfect.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-706308 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @turbo/linux-64 is vulnerable to Path Traversal in versions 1.0.0 - 2.9.17. | 1.0.0 - 2.9.17 | Low |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 7 months ago
- Unpacked Size
- 40 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.