ah-fix-dom-flash
Warn
Audited by Socket on Mar 27, 2026
1 alert found:
AnomalyAnomalyscripts/flash-detector.js
LOWAnomalyLOW
scripts/flash-detector.js
The fragment is a continuous DOM “flash/visibility/position/transform” detector that gathers computed styles, bounding-rect geometry, and short text snippets from matched elements and passes them to an external record(...) function. The snippet itself shows no direct malware/network/credential theft, but it creates a moderate privacy/security risk because it repeatedly captures UI content and layout metadata and its exfil/logging behavior depends entirely on the unseen record() implementation.
Confidence: 62%Severity: 55%
Audit Metadata