temu-trending-products-scraper

SUSPICIOUS leaning but not malicious: the stated scraping purpose matches the capability, and the dependency appears to be the publisher's official BrowserAct ecosystem rather than a random third party. The main risks are automatic transitive installation, unpinned external runtime updates, and limited inspectability of the CLI package, not obvious credential theft or incompatible data exfiltration.