openscreen-design

Warn

Audited by Socket on Oct 17, 2026

1 alert found:

Anomaly
AnomalyLOW
openscreen-widget.html

This fragment is a dynamic client-side bundle unpacker/loader. It decodes base64 (optionally gzip) assets from inline manifest data, reconstructs an HTML template, injects resources into the document head, and then recreates/replaces script tags so that bundled JavaScript executes. There is no explicit malicious behavior (e.g., exfiltration/credential theft) visible in the loader itself, but the design is strongly execution-oriented and lacks integrity verification; the actual behavior depends on the embedded compressed payload, which is not fully assessable here. Treat as potentially suspicious and review the embedded/decompressed JavaScript payload for malicious actions.

Confidence: 55%Severity: 60%
Audit Metadata
Analyzed At
Oct 17, 2026, 12:57 PM
Package URL
pkg:socket/skills-sh/getopenscreen%2Fopenscreen%2Fopenscreen-design%2F@65a5abede17db4451e0ea3541ff4c765f8e7adad80a8781b04557586edbb9bb6