wechat-official-batch-download

This code is an article downloader and shows no clear evidence of malware, destructive behavior, or unauthorized system-data collection. It disables TLS certificate verification and, when proxy mode is used, places the optional WeChat Cookie in a URL query sent to configured proxy endpoints, creating credential disclosure and interception risks. Relevant configuration includes `DWT_PRIVATE_PROXY_HOSTS` and `proxy_pool.txt`; permitted direct hosts are `mp.weixin.qq.com` and `api.weixin.qq.com`. Severity is moderate; use only trusted proxies and restore TLS verification.

This is a local HTML normalization utility with no evident malware behavior or direct data exfiltration. It can produce cross-site scripting or unwanted browser requests from untrusted HTML or metadata because it retains active markup and inserts several values without adequate sanitization; severity is moderate when generated files are viewed in a browser. No suspicious domains, IP addresses, or credentials are hardcoded.