web-browser
Warn
Audited by Socket on Oct 21, 2026
1 alert found:
AnomalyAnomalyscripts/eval.js
LOWAnomalyLOW
scripts/eval.js
This is a browser evaluation utility that deliberately executes command-line-supplied JavaScript in the active page through a local Puppeteer connection. Its primary risk is arbitrary code execution within that browser page, including access to page data and actions available to the page; use only with trusted input and a trusted local browser endpoint. No credential theft, external network destination, or other independent malicious behavior is evident in this fragment. Severity is conditional and moderate for intended local use, but high if untrusted users can supply the evaluated code.
Confidence: 99%Severity: 63%
Audit Metadata