Serious Privacy Vulnerability Found in "Immersive Translation" Plugin May Expose User Private Keys

On August 9, community user @Cryptohaifeng_ posted on the X platform, stating that the "Web Snapshot" feature of the "Immersive Translation" plugin has a security vulnerability. When generating and sharing translation snapshots, data is stored on a publicly accessible cloud site without anti-crawling measures, which could lead to the leakage of sensitive information such as wallet private keys and financing agreements. Some users have discovered that the leaked information includes documents related to ZhongAn International's participation in the A2 round financing subscription agreement of Yuanbi Technology. Previously, this product sparked controversy for restricting users from using third-party low-cost APIs, forcing subscription memberships, and the founder exposing the addresses of competing product authors in group chats.