court-dockets
Fail
Audited by Socket on Sep 7, 2026
1 alert found:
MalwareMalwarescripts/lm_cookie.py
HIGHMalwareHIGH
scripts/lm_cookie.py
This module is specifically designed to extract HTTP cookies (session/authentication material) from a locally running Chrome/Chromium instance exposed via the DevTools Protocol. It discovers a debuggable page on localhost, connects to its CDP WebSocket, calls Network.getCookies for a chosen URL, and returns/partially prints the resulting cookie data. In a malicious or unintended context, this pattern enables session hijacking/credential theft; the code contains no safeguards or consent checks and directly handles sensitive cookie values.
Confidence: 82%Severity: 90%
Audit Metadata