沪深300多因子投研系统 v6.0 — 多策略量化选股平台

• Analyzed: May 16, 2026, 9:21 AM
• Findings: 1
• Version: 6.0.0
• Hash: dad7089ddfe6967282a9b17ae337c448723b3b42bd36db59cd535491e60a7a6a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The quantitative research system contains hardcoded credentials for the JQData service (account '13918681158' and password 'Yindb1158') across multiple files, including call_auction_analysis.py, full_analysis_v5.py, and jq_config.py. Furthermore, data_fetcher.py utilizes the unsafe pickle module for data caching, which poses a significant security risk (Remote Code Execution) if cache files are tampered with. While the bundle's functionality for automated financial reporting aligns with its stated purpose, these critical security vulnerabilities and the exposure of credentials warrant a suspicious classification.