douyin-similar-account
Warn
Audited by Socket on Aug 20, 2026
1 alert found:
SecuritySecurityquery_wrapper.py
MEDIUMSecurityMEDIUM
query_wrapper.py
This module is a high-risk dynamic loader/launcher: it forcibly sets arguments and then executes a local Python file’s source via exec(open(...).read()) without validation. While the wrapper fragment itself shows no direct malicious action, it materially increases supply-chain attack impact by turning the contents of scripts/douyin_similar_account.py into arbitrary code execution at runtime. Review and verify the integrity and behavior of the referenced script to confirm whether any malicious activity (exfiltration, credential theft, persistence, or unwanted system/network actions) exists.
Confidence: 66%Severity: 80%
Audit Metadata