Loading npm security reports…
Open Omni — grab any video from YouTube, X, Instagram, Threads & 1800+ sites — right from your terminal. paste. download. done.
Running the CLI automatically attempts to export cookies from a detected browser profile. It then uses the resulting unfiltered cookie string in Instagram requests and installs executable download helpers.
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/cli.jsView on unpkg · L6Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/cli.jsView on unpkg · L1172The CLI automatically selects an installed browser and extracts its cookies when the user did not supply cookie options.
dist/cli.jsView on unpkg · L4162Extracted cookies are written to a temporary file and read into a request header without domain filtering.
dist/cli.jsView on unpkg · L2175This report applies to open-omni@1.1.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/cli.jsView on unpkg · L6Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/cli.jsView on unpkg · L1172Extracted cookies are written to a temporary file and read into a request header without domain filtering.
dist/cli.jsView on unpkg · L2175The CLI automatically selects an installed browser and extracts its cookies when the user did not supply cookie options.
dist/cli.jsView on unpkg · L4162