inner-mongolia-energy-ip-platform

No clear indicators of overt malware (no reverse shells, persistence, or filesystem interaction) are present in this fragment. The dominant risk is serious client-side security weakness: multiple DOM XSS patterns caused by repeated innerHTML usage with unescaped interpolated data (datasets, file names, AI tool metadata, and remote AI replies) and the use of inline onclick handlers with interpolated values. Because the PatSnap API key is stored in localStorage and then used as a Bearer token, successful XSS would likely enable API key theft and unauthorized external API usage from the attacker’s scripts. Overall, this module should be treated as high security risk unless all interpolated data is strictly sanitized/encoded and inline handlers are removed.