many malicious attacks come from inside a corporate network - not necessarily from the outside world so that's not really a valid excuse IMO
2.2 is not supported either. You need to upgrade to a recent supported release of Moodle.
there is a list of tools available for generating SCORM packages here:
https://docs.moodle.org/en/Creating_SCORM_Content
You could just author your learning directly inside Moodle - using the standard quiz module, possibly the lesson module if you want to take the user through a number of "pages"