hot-china

• Analyzed: May 15, 2026, 9:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9340fc97eb9f36061cc391d7c371bfa384977d92b46c05bd5150cae5ce523e8e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a collection of Node.js scripts designed to crawl real-time hot search data, music charts, entertainment rankings, and newspaper metadata from various Chinese platforms (e.g., Weibo, Douyin, Baidu, Bilibili, and People's Daily). The scripts (crawl-hot.js, crawl-music.js, crawl-entertainment.js, and crawl-paper.js) use the built-in fetch API to retrieve data from legitimate public endpoints and output the results as JSON. The code is straightforward, lacks external dependencies, and contains no evidence of malicious intent, data exfiltration, or harmful prompt injection.