aws-wechat-article-publish
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalyscripts/publish.py
LOWAnomalyLOW
scripts/publish.py
The code is a readable WeChat article publishing utility and contains no clear malicious payload, persistence, sabotage, or covert system-data theft. Security concerns include configurable arbitrary API endpoints receiving credentials and content, secrets placed in URLs, and deliberate printing of the full access token. Restrict API endpoints to trusted HTTPS hosts, URL-encode query parameters or use safer credential transport where supported, and avoid printing full tokens.
Confidence: 97%Severity: 55%
Audit Metadata