ojmin / vnpy_ Goto Github PK

Hello, Ojmin

I see that you're creating cool project, but are you sure that the connection data (login&password&ip) should be open to everyone?

https://github.com/Ojmin/vnpy_/blob/674414959a2c6f6aebb6ead4430bdbfcf47d72d0/vnpy/script.py

From what I've seen there are methods to transfer funds in the code + it could be possible to create buy orders for some shitty coins and waste your money.

I recommend you to remove all the passwords/logins and add them to the .gitignore :)

If you think that my issue is valid and my finding worth a reward, my BTC is 18BK2bZSc8a1VG6pfz5NYfjaP839AjJRUn

Hope you will fix the issue fast and no harm will be done, good luck!