wechat-article-fetcher
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalyscripts/fetch.js
LOWAnomalyLOW
scripts/fetch.js
The fragment appears intended as a WeChat article scraper, not malware. As supplied it has a syntax error and will not run. If corrected, the unsanitized domain filename enables path traversal, and unrestricted fetching of article-provided image URLs creates an SSRF risk. No clear data theft or destructive behavior is present.
Confidence: 98%Severity: 62%
Audit Metadata