wechat-article-fetcher

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/fetch.js

The fragment appears intended as a WeChat article scraper, not malware. As supplied it has a syntax error and will not run. If corrected, the unsanitized domain filename enables path traversal, and unrestricted fetching of article-provided image URLs creates an SSRF risk. No clear data theft or destructive behavior is present.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:32 PM
Package URL
pkg:socket/skills-sh/zsxink%2Fskills-hub%2Fwechat-article-fetcher%2F@194740464c29d921bcf39ba4a7bbf087cc4f172dc6bc322631943fe9122ab63e