varg-dropship-reel

This is a demo UI driven by URL query parameters, not evidence of malware or intentional data theft. Its unescaped insertion of query-controlled values into innerHTML creates a significant reflected DOM-XSS risk, and supplied image URLs can trigger browser requests to third-party resources. No credentials, environment variables, or explicit exfiltration endpoints are present. Severity: high for users who open attacker-crafted links.

This is a command-line screenshot utility, not evident malware. Its caller-controlled URL can make Chromium access unintended or internal network destinations, and its unsanitized screenshot name can use path traversal to write outside the requested output directory; severity depends on whether arguments are attacker-controlled. No specific domains, IPs, or credentials are present.