hyperframes-product-launch-video
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalyscripts/extract_site_dna.js
LOWAnomalyLOW
scripts/extract_site_dna.js
The code appears to be a legitimate website branding extraction utility, not intentional malware. It does introduce a meaningful SSRF and resource-consumption risk because arbitrary page and asset URLs, including redirects, are fetched without host, scheme, size, timeout, or redirect-count restrictions. The fragment also appears syntactically invalid in the redirect handler as provided. No evidence of data theft, persistence, credential harvesting, or system damage is present.
Confidence: 97%Severity: 62%
Audit Metadata