xhs-search-workflow
Warn
Audited by Socket on Sep 24, 2026
1 alert found:
SecuritySecurityassets/js/xhs_xs_xsc_56.js
MEDIUMSecurityMEDIUM
assets/js/xhs_xs_xsc_56.js
This fragment contains an intentionally obfuscated bytecode payload executed by a custom virtual machine and includes sensitive browser-session data. The visible code does not establish that the payload exfiltrates data or is malware, but the opaque executable content and credentials warrant review of the decoded bytecode and the larger file before use.
Confidence: 98%Severity: 72%
Audit Metadata