replit-playwright-chromium
Warn
Audited by Socket on Sep 3, 2026
1 alert found:
SecuritySecurityscripts/browser_monitor.py
MEDIUMSecurityMEDIUM
scripts/browser_monitor.py
No classic malware indicators (e.g., code execution, credential theft, persistence, or reverse shell) are present in this fragment. However, the core functionality is a browser screenshot streamer: it captures live page content via CDP and transmits both URL metadata and raw JPEG screenshots to any client that can reach a WebSocket server bound on 0.0.0.0, with no authentication or access controls. This creates a high privacy/security exposure consistent with surveillance/exfiltration tooling if shipped or deployed unintentionally or exposed on a network.
Confidence: 67%Severity: 78%
Audit Metadata