screenstudio-alt
Fail
Audited by Socket on Jul 1, 2026
1 alert found:
MalwareMalwaresrc/events-log.swift
HIGHMalwareHIGH
src/events-log.swift
This Swift module is a macOS input event logger: it installs a system-wide CGEvent tap to capture keystrokes (Unicode text) and mouse clicks, and it samples cursor movement continuously, persisting all of it to a JSONL file chosen via command-line arguments. It includes a “secure input” suppression mechanism that records only a marker during secure input contexts, which is consistent with evading password/secure-entry capture. No exfiltration is shown in the fragment, but the local persistence of sensitive user interaction data makes the security/privacy risk very high.
Confidence: 84%Severity: 92%
Audit Metadata