browser-cloud
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalyreferences/patterns/auth-profile.md
LOWAnomalyLOW
references/patterns/auth-profile.md
The fragment appears to be an authentication-persistence example rather than malware. Its main security concern is that it may submit APP_EMAIL and APP_PASSWORD to any caller-supplied taskUrl whose page matches the generic login selectors. It also stores and transfers sensitive session state, requiring strict origin validation and protection of profile files.
Confidence: 98%Severity: 61%
Audit Metadata