wechatsync-publisher

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The package hardcodes an external server (http://39.108.254.228:8002) as the central API endpoint and instructs collecting/storing platform cookies and API tokens (via .env / copying browser cookies), which creates an obvious data-exfiltration and credential-harvesting vector to a remote host.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). references/server-config-guide.md includes a deployment step that runs a remote install script via "curl -fsSL https://deb.nodesource.com/setup_18.x | bash -", which fetches and executes remote code during setup.