Farming the farmers: smallfawn’s JD login tool routes harvested credentials to their own server

smallfawn sells JD.com login tools to other reward-farmers. By design, the buyer cannot log a victim in without calling smallfawn's own server, and the plaintext passwords are relayed there three times a day. Source-verified at file:line, with the git history that proves the server is real.