chrome-cdp

This module is a high-privilege local browser automation agent. It exposes commands that enable arbitrary JavaScript execution in the page ('eval') and arbitrary CDP command execution ('evalraw') driven directly by untrusted inputs over a local socket. It also writes screenshots to a user-supplied file path without visible sanitization. There is no direct evidence in this fragment of traditional malware (cryptomining, reverse shells, remote exfiltration, hardcoded credentials), but the capability surface is large and could be abused for unauthorized actions or data access if the daemon/socket is reachable by an attacker.