x-tweet-fetcher
Warn
Audited by Socket on Oct 3, 2026
1 alert found:
AnomalyAnomalyscripts/fetch_china.py
LOWAnomalyLOW
scripts/fetch_china.py
The code appears intended for platform content retrieval and shows no clear malware behavior. The main security concern is SSRF from weak URL validation, particularly Weixin's direct request and Camofox navigation. Treat URLs as untrusted and validate their parsed scheme and hostname before fetching; protect supplied cookies and the router-agent command queue.
Confidence: 96%Severity: 55%
Audit Metadata