vipkid-ops
Audited by Socket on Mar 16, 2026
1 alert found:
Obfuscated FileThe code is a readable, non-obfuscated utility for connecting to a Chrome DevTools Protocol endpoint and extracting browser cookies for a specified origin/hostname, then printing the cookie value to stdout. There is no sign of typical malware behaviors (external network exfiltration, eval-based obfuscation, or OS command execution) in the provided fragment. However, this module performs sensitive credential extraction (cookies) and should be treated as a potentially dangerous tool in untrusted contexts: running it on a machine with active authenticated browser sessions can leak session tokens. Only run in trusted environments and avoid piping stdout to untrusted consumers. No further malicious indicators were found in the supplied code.