toutiao-search@1.0.2
CAUTIONPublisher claims: "今日头条爆款内容查询 — 输入关键词搜索今日头条最新作品（图文/视频），支持按阅读量/时间排序、限定时间范围，终端表格展示 + CSV 导出 + 交互式 HTML 报告。当用户需要搜索今日头条热门内容、追踪头条热点、分析爆款文章时使用。当接口返回积分不足（code=3210）时，自动唤起支付宝完成充值后继续查询。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry ClawHubPublisher redfox-data · joined 2 days agoInstalls 633Last detonated 27 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
npx invocation of non-well-known packagereferences/alipay-recharge.md:62 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Outbound HTTP to raw IP addressscripts/search.py:615 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Outbound HTTP to raw IP addressscripts/search.py:736 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
npx invocation of non-well-known packagereferences/alipay-recharge.md:111 · npx invocation of non-well-known package — may execute untrusted code
AST06MEDIUM
URL using raw IP addressscripts/search.py:615 · URL using raw IP address — may bypass domain-based filtering
AST07HIGH
URL with embedded credentialsscripts/search.py:493 · URL with embedded credentials — may be phishing or credential leaking
AST07MEDIUM
URL using raw IP addressscripts/search.py:736 · URL using raw IP address — may bypass domain-based filtering
AST07HIGH
Python subprocess execution detectedscripts/search.py:741 · Python subprocess execution detected
AST05HIGH
URL with embedded credentialsassets/report_template.html:10 · URL with embedded credentials — may be phishing or credential leaking
AST07