douyin-upload

This code performs aggressive runtime modification of browser globals and native functions to make instrumented contexts look native (spoofing navigator.plugins/mimeTypes, deleting navigator.webdriver, patching toString, wrapping functions with proxies). These behaviors are consistent with anti-bot/fingerprinting-evasion libraries, not direct malware. However, the heavy use of eval and dynamic proxying is an elevated supply-chain risk because it increases the chance the module could hide or add malicious behavior. Recommended: treat as potentially risky for sensitive contexts — audit the complete package and any remote inputs or additional eval strings before use.