electron-leak

An Electron-app bot leaking its process and automation globals — it reports as Chrome but the Electron runtime shows through.

botverdict

1.00score

15/185checks fired

Convicting tells 8

br.automation_globalsAutomation-framework global or webdriver DOM attribute present

br.cdp_runtime_enabledCDP Runtime.enable detected (prototype-chain Proxy ownKeys trap)

br.ch_he_headlessUA-Client-Hints high-entropy brand list reveals HeadlessChrome

br.electron_processRenderer exposes a Node process object — Electron / automation runtime

br.headless_uaUser-Agent advertises a headless browser

br.no_chrome_objectChrome User-Agent but window.chrome is absent

br.permissions_anomalyNotification.permission contradicts the Permissions API state

br.webdriver_getter_tamperedNavigator.prototype.webdriver getter is non-native (prototype patch)