douyin-comments

This is a local Chrome DevTools bridge, not clear malware. Its unauthenticated endpoints expose arbitrary browser JavaScript execution and navigation to clients that can access the loopback service, creating a significant local security risk. Restrict access or add authentication and request protections if used outside a tightly controlled environment.