court-dockets

Fail

Audited by Socket on Sep 7, 2026

1 alert found:

Malware
MalwareHIGH
scripts/lm_cookie.py

This module is specifically designed to extract HTTP cookies (session/authentication material) from a locally running Chrome/Chromium instance exposed via the DevTools Protocol. It discovers a debuggable page on localhost, connects to its CDP WebSocket, calls Network.getCookies for a chosen URL, and returns/partially prints the resulting cookie data. In a malicious or unintended context, this pattern enables session hijacking/credential theft; the code contains no safeguards or consent checks and directly handles sensitive cookie values.

Confidence: 82%Severity: 90%
Audit Metadata
Analyzed At
Sep 7, 2026, 05:55 AM
Package URL
pkg:socket/skills-sh/edwinhu%2Fworkflows%2Fcourt-dockets%2F@288646ab5c3b05b197185c06abc565d576599e41ee793fdb0c900e06db2dbdb0
Security Audit — socket — court-dockets