nature-downloader
Fail
Audited by Socket on Oct 11, 2026
1 alert found:
MalwareMalwarescripts/lib/anti-bot.mjs
HIGHMalwareHIGH
scripts/lib/anti-bot.mjs
This module is highly consistent with abusive anti-bot/captcha bypass automation: it detects slider and reCAPTCHA challenge elements in the target DOM, executes browser-context JavaScript to trigger synthetic user actions, and uses CDP-driven mouse events to perform human-like dragging/clicking, followed by heuristic success checks and retries. While no direct data theft is visible in the provided fragment, the intended functionality undermines security controls (human verification) and is therefore a serious security risk in most deployment contexts.
Confidence: 86%Severity: 95%
Audit Metadata