lseg-data

The fragment provides a legitimate-looking authenticated automation workflow, but it enables access to browser session credentials and arbitrary Python execution in the user's CodeBook environment. No explicit malicious payload or external exfiltration is present in the visible portion. Use only with the account owner's authorization and trusted code; outputs and notebooks may contain sensitive data.

The fragment is not executable malware, but its opening instructions describe a method to circumvent an API entitlement by reusing browser-session keys and a Referer-bound internal endpoint. This presents an access-control and licensing risk if used without authorization; the remaining material documents normal API usage.

This is an authenticated browser-fetch utility that uses Chrome DevTools to run a caller-specified request in an open Refinitiv Workspace tab. It can access session-authorized resources and disclose their responses through stdout or a local file. No explicit malware payload or remote exfiltration destination is shown; use should be restricted to trusted URLs and authorized sessions.