agent-browser

No explicit malware payload is shown in this fragment, but it documents a high-risk dual-use browser automation tool. The advertised capabilities—arbitrary page-context JavaScript execution via eval (base64/stdin), persistent session state save/load (auth.json), cookie/localStorage manipulation, network interception/mocking, local extension loading, and advanced control options (CDP/proxy/TLS weakening)—could enable credential/session abuse or page tampering if untrusted inputs or artifacts are used. This warrants careful review of how the actual package enforces script/state/extension provenance and runtime sandboxing.