shiwu-huajing

This is a browser-based demo screenshot harness, not evident malware. Its temporary file server has a path-traversal risk: crafted request paths can potentially serve files outside ROOT, and the server may bind beyond loopback; severity is moderate and depends on exposure and attacker access. No suspicious external domains, credentials, or intentional data exfiltration are shown.