meta-ads
Warn
Audited by Socket on Sep 20, 2026
1 alert found:
AnomalyAnomalycampaign/scripts/lp_analyzer.py
LOWAnomalyLOW
campaign/scripts/lp_analyzer.py
The fragment appears to be a legitimate landing-page scraping and branding extraction utility, with no clear evidence of malware or intentional sabotage. It has a material SSRF risk because user-controlled and page-controlled URLs are fetched without scheme, host, redirect, port, or private-network restrictions. Local output paths are also caller-controlled and should be sandboxed. These issues require review in a service context, but the code does not show credential theft, persistence, command execution, or explicit data exfiltration.
Confidence: 97%Severity: 62%
Audit Metadata