browser-tools

This module is a local CDP cookie-dumping utility. It does not exhibit classic malware behaviors like persistence or remote exploitation, but it collects **raw cookie values** from an existing authenticated browser tab and outputs them to stdout/logs, creating a high risk of sensitive session/credential leakage in any environment where logs are accessible or exported. It should be treated as a high-sensitivity diagnostic tool and used only with strict access/log-handling controls.

No explicit malware behavior, obfuscation, or direct external exfiltration is present in this module. However, it provides a high-risk capability: it evaluates arbitrary caller-supplied JavaScript inside an existing, potentially authenticated browser tab using an AsyncFunction-based eval-equivalent mechanism, and then prints returned values to stdout. If an attacker can influence the CLI input or the target debug session/tab content, they can read sensitive page data (and potentially cause in-page side effects), making this module dangerous in untrusted environments.