wtpy
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalyreferences/tools-console.md
LOWAnomalyLOW
references/tools-console.md
No malicious behavior is evident in the supplied documentation or Python example. The content describes legitimate monitoring and trading-management functionality. Security concerns include the publicly documented default administrator credential, possible use of plain HTTP, and an administrative scheduler capable of executing configured programs. These are deployment and access-control risks rather than evidence of malware. The default password should be changed, the service should be restricted and preferably placed behind HTTPS, and scheduler/configuration operations should be strongly authorized and audited.
Confidence: 98%Severity: 58%
Audit Metadata