linkfox-etsy-product-query
Warn
Audited by Socket on Oct 17, 2026
1 alert found:
AnomalyAnomalyscripts/etsy_product_query.py
LOWAnomalyLOW
scripts/etsy_product_query.py
The code appears to implement an API wrapper with local caching and session artifact management, not malware. The principal security issue is unsanitized SESSION_ID use in filesystem paths, which permits path traversal or absolute-path redirection when the environment is attacker-controlled. The configurable gateway also means sensitive headers and query data can be redirected by a manipulated environment. No embedded malicious payload or obfuscation is evident. The shown fragment additionally appears syntactically incomplete at the final main( call.
Confidence: 97%Severity: 58%
Audit Metadata