openscreen-design
Warn
Audited by Socket on Oct 17, 2026
1 alert found:
AnomalyAnomalyopenscreen-widget.html
LOWAnomalyLOW
openscreen-widget.html
This fragment is a dynamic client-side bundle unpacker/loader. It decodes base64 (optionally gzip) assets from inline manifest data, reconstructs an HTML template, injects resources into the document head, and then recreates/replaces script tags so that bundled JavaScript executes. There is no explicit malicious behavior (e.g., exfiltration/credential theft) visible in the loader itself, but the design is strongly execution-oriented and lacks integrity verification; the actual behavior depends on the embedded compressed payload, which is not fully assessable here. Treat as potentially suspicious and review the embedded/decompressed JavaScript payload for malicious actions.
Confidence: 55%Severity: 60%
Audit Metadata