scrapedo-web-scraper
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalyscripts/scrape.py
LOWAnomalyLOW
scripts/scrape.py
The code is a straightforward Scrape.do web-scraping client and contains no clear malware, backdoor, or intentional system-data theft. The primary security concerns are transmitting an API token over HTTP and placing it in query parameters, which can expose credentials through network monitoring and logs. Credential-file access is expected for this utility, but the endpoint should use HTTPS and token handling should avoid URL query exposure where possible. The fragment also appears syntactically incomplete.
Confidence: 97%Severity: 62%
Audit Metadata