Catbus AI Agent

by cv-cat• 549•• Scanned•Claim this listing•Request removal
Social Mediaai agentbilibiliclaude codeclicrawler

一个命令操作小红书、抖音、TikTok、B 站、快手、微博、闲鱼、淘宝、京东、X:统一的命令与 JSON 输出,给人和 AI Agent 用

Catbus is an open-source ai agent by cv-cat, written mainly in TypeScript, with 549 GitHub stars and the MIT license. Its code was last updated Oct 29, 2026.

Scan summary: scanned Nov 5, 2026 at commit 87dfce4. Seen able to run dynamic code. Scan policy

Scanned
Full scan at 87dfce4 · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit18 known vulnerabilitieswarn
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (200)

  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    obfuscation issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/douyin/acrawler_runtime/ac_vm.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kwf-0.0.2.2cee19b4b7dec496.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-0-0.0.1-obfuscated.4b7f3de1ab0ddcc2.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-1-0.0.1-obfuscated.346ebdb1c78df316.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-10-0.0.1-obfuscated.a33db41897b983af.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-11-0.0.1-obfuscated.5e0a90af726d8a7e.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-12-0.0.1-obfuscated.20ea29345706ec8c.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-13-0.0.1-obfuscated.6b74e9640ff18648.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-14-0.0.1-obfuscated.551e4429d156bf66.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-15-0.0.1-obfuscated.8625b087aaba4a60.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-16-0.0.1-obfuscated.d5ffa4020f3be99a.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-17-0.0.1-obfuscated.6d13e19b22f50a80.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-18-0.0.1-obfuscated.6d31405044166289.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-19-0.0.1-obfuscated.a9a8d925942f19e4.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-2-0.0.1-obfuscated.b849a136ae4a6b3e.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-3-0.0.1-obfuscated.f9e77ebf6186e2ac.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-4-0.0.1-obfuscated.2c3c155aa52ceb0e.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-5-0.0.1-obfuscated.4e553d17691b3c5a.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-6-0.0.1-obfuscated.f73ddd3ff13e1217.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-7-0.0.1-obfuscated.1628b8729beaab7e.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-8-0.0.1-obfuscated.6da6baef7aa81fff.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/bundles/weapon/kws-9-0.0.1-obfuscated.8645d55e5323b743.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/kuaishou/js/cp-kwf.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/maoyan/package-1.2.0.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/taobao/taobao_js_20260407.js:567
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/tiktok/shop_bsid/loader.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/tiktok/shop_bsid/webmssdk.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/tiktok/shop_bsid/webmssdk_ex.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/tiktok/signing/source/webmssdk_ex.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/tiktok/signing/source/webmssdk_legacy.js:1
  • medium
    Very long encoded string literal. Often used to hide a payload.
    static/xianyu/goofish_js_version_2.js:565
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    package-lock.json
  • medium
    undici@8.11.2: 8 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
    package-lock.json
  • medium
    vite@8.3.1: 6 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +1 more
    package-lock.json
  • medium
    zod@4.6.5: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    package-lock.json
  • low
    Possible example credential in docs/tests: private-key
    docs/guide/login.md:147
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/comment_publish.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/comment_publish_ecdsa.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/device_id.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/feed.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/digg.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/following.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/comments.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/comment_publish_profile.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/comment_publish_custom_profile.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/im_push.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/im_create.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/im_share_web.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/comment_reply.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/live_like.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/live_frame.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/im_send_text.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/live_rank.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/im_share_photos.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/im_user_card.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/live_production.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/live_info.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/dtrait_blob.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/im_send_image.json:4
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/golden/douyin/im_send_image.json:571
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/my_sec_uid.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/mstoken_common_sms.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/mstoken_behavior.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/collect_list.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/mstoken_common.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/live_room_enter.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/live_rank_thousand.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/notices.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/guest_item_get.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/mstoken_renew.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/recv_ws.json:4
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/golden/douyin/recv_ws.json:281
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/replies.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/search_general.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/im_share_aweme.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/live_ws.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/search_user.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/im_send_file.json:4
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/golden/douyin/im_send_file.json:572
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/live_products.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/followers.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/live_like_count.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/notices_group.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/media_upload_image.json:4
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/golden/douyin/media_upload_image.json:722
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/product_comment_counter.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/pure.json:4
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/golden/douyin/pure.json:48
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/work_info.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/work_list.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/search_general_filter.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/collect_remove.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/digg_uid.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/my_uid.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/login_sms_sso.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/live_chat.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/search_live.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/product_comments.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/search_video.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/product_comments_tag.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/uncollect.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/search_user_filter.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/webcast_fetch.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/user_favorite.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/user_info.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/server_cert.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/search_video_p2.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/user_works.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/collect.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/post_images.json:4
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    tests/golden/douyin/post_images.json:724
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/user_works_p2.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/im_upload_image.json:4
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/golden/douyin/im_upload_image.json:572
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/tiktok/_fixtures.json:2
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/golden/douyin/post_video.json:1278
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/post_video.json:4
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/golden/tiktok/apply_image_upload.json:16
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/golden/tiktok/apply_upload_inner_image.json:16
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    tests/golden/tiktok/aws_v4.json:10
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/product_detail.json:4
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/golden/jd/summer_encrypt.json:22
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/golden/tiktok/commit_upload_inner.json:20
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/golden/tiktok/commit_image_upload.json:20
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/tiktok/_session.json:3
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/undigg.json:4
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/collect_move.json:4
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/golden/jd/safe_verify.json:540
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/golden/tiktok/apply_upload_inner_video.json:16
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    tests/golden/douyin/post_images_profile.json:724
  • low
    Possible example credential in docs/tests: private-key
    tests/golden/douyin/post_images_profile.json:4

Network activity

During install
registry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Catbus alternatives

View more →

Similar ai agents in Social Media, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Catbus (this page)
cv-cat
549MITOct 29, 2026Scanned, no flagged issues
Agent Reach
Panniantong
107kMITNov 1, 2026Scanned, no flagged issues
Autoclip
zhouxiaoka
9.9kMITNov 1, 2026Scanned, no flagged issues
ShortGPT
RayVentura
8.1kMITFeb 10, 2025Scanned, no flagged issues
Guizang Social Card Skill
op7418
7.9kAGPL-3.0Oct 30, 2026Scanned, no flagged issues
Tuios
Gaurav-Gosain
6.3kMITNov 1, 2026Scanned, no flagged issues