wechat-article-scraper

No clear malware or deliberate supply-chain attack is present. The code is intended to generate a report and PDF, but it contains a significant HTML injection risk because multiple data fields are inserted without escaping, and URL escaping does not protect quoted attributes. The fragment also appears malformed and may not execute as shown. Use html.escape(value, quote=True) for attribute values and escape all text nodes, validate the keyword as a safe filename component, and correct the apparent string/function boundary errors.