hyperframes-product-launch-video

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/extract_site_dna.js

The code appears to be a legitimate website branding extraction utility, not intentional malware. It does introduce a meaningful SSRF and resource-consumption risk because arbitrary page and asset URLs, including redirects, are fetched without host, scheme, size, timeout, or redirect-count restrictions. The fragment also appears syntactically invalid in the redirect handler as provided. No evidence of data theft, persistence, credential harvesting, or system damage is present.

Confidence: 97%Severity: 62%
Audit Metadata
Analyzed At
Sep 14, 2026, 07:20 PM
Package URL
pkg:socket/skills-sh/varnan-tech%2Fopendirectory%2Fhyperframes-product-launch-video%2F@e72f5df9b34561bf5416abe8f4cce80e59e5f6bedf586fd7b41b4af040a0cee0