ui-json-capture
Warn
Audited by Socket on Sep 7, 2026
1 alert found:
SecuritySecurityscripts/01-install-hook.js
MEDIUMSecurityMEDIUM
scripts/01-install-hook.js
This module is behaviorally suspicious: it globally monkey-patches XMLHttpRequest to target a specific endpoint path and collects full JSON result rows into a persistent in-memory global (window.__cap) with deduplication and error logging. No direct network exfiltration or payload execution is present in the provided fragment, but the design aligns with client-side scraping/data harvesting and could enable unauthorized data collection if used in an untrusted context.
Confidence: 62%Severity: 70%
Audit Metadata