feishu-doc-scraper

No clear malware payload or obfuscation is present. However, the code performs high-sensitivity Chrome cookie extraction and forwards those cookies to unrestricted user-supplied URLs and remote image URLs. This creates a serious credential leakage risk if any input or fetched page is untrusted. Restrict URLs to approved Feishu domains, send only necessary cookies, validate extracted image hosts, and fix the incomplete final parenthesis.