qmt-strategy
Audited by Socket on Sep 11, 2026
4 alerts found:
Anomalyx4The fragment is trading-platform documentation with executable examples. It contains legitimate but high-impact order-submission and account-data operations that may place real trades if run in a live environment. No evidence of malware, data exfiltration, credential theft, obfuscated payloads, persistence, or system sabotage is present. Users should treat the order examples as potentially financially dangerous and run them only with authorized test accounts or appropriate safeguards.
The supplied content is ordinary QMT trading-system documentation with sample quantitative strategies. It contains no apparent malware, exfiltration, backdoor, or obfuscated payload. Its principal risk is intentional trading functionality: the live handlebar example can submit real buy and sell orders when configured for a real account. The examples also contain correctness issues that could cause unexpected strategy behavior, especially the inconsistent backtest account identifier and missing return after insufficient data.
未发现恶意代码、数据窃取或供应链攻击行为。该片段是面向 QMT 的自动交易文档和示例,但包含可向真实交易柜台提交买卖订单的高影响操作。主要风险来自真实资金交易、立即下单模式、硬编码示例参数、未定义变量以及不完整的委托和风险控制逻辑。
The visible fragment is a quantitative trading strategy tutorial/example, not apparent malware. It accesses market and account data and can submit automated trades through passorder(...). The incorrect or ambiguous order-code comments and hardcoded test account create a meaningful risk of unintended trading if copied into live use. No credential theft, data exfiltration, destructive behavior, obfuscation, or unauthorized persistence is evident in this portion.