record-mac-demo

The code appears to be a local VNC automation and capture utility, not clearly malware. However, its unauthenticated loopback HTTP interface permits desktop control and arbitrary-path file writes within the process's permissions. Restrict or authenticate requests and validate output paths before use.