clone-page

The code appears intended for page asset collection and shows no clear evidence of malware. It has security risks: page-controlled font family names can cause path traversal in output files, and page-controlled asset URLs plus unrestricted redirects permit SSRF-like requests. Unbounded downloads can also exhaust disk resources.

This is an intentional dynamic-code execution utility, not evidence of malware by itself. Passing untrusted input can enable arbitrary JavaScript execution in the runtime context, so callers must ensure the script is trusted or use a safer design.