cocos2d-cli

No clear malware behavior is evident. The main security concern is an unauthenticated editor-control HTTP server that may bind to non-loopback interfaces and uses permissive CORS; reachable clients can query scene information and trigger refresh/open-scene actions. The unbounded request-body buffering also presents a denial-of-service risk.