ecommerce-tiktok-video-rank
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalyscripts/echotik_list_video_rank.py
LOWAnomalyLOW
scripts/echotik_list_video_rank.py
No clear malware or intentional data theft is present. The code is a network API client that intentionally sends an API key and request metadata to NexScope and stores returned data locally. Security risk is primarily conditional: a user-controlled NEXSCOPE_PROXY_BASE can redirect credential transmission, and a user-controlled SESSION_ID can cause path traversal or arbitrary-path file writes. The literal ending also appears syntactically incomplete.
Confidence: 97%Severity: 58%
Audit Metadata