Auth & Client-Side Security
medium Severity
Free Check
Clipboard Hijacking Vulnerability
Scans for suspicious navigator.clipboard writes and copy event listeners that tamper with copied cryptocurrency or terminal strings.
Why It Matters
Malicious scripts intercept copy events to replace crypto wallet addresses or curl commands with malicious payloads.
How We Check This
We analyze script event handlers attached to copy events and navigator.clipboard.writeText calls.
How to Fix & Implement
Copy-paste configuration blocks tailored for your web server or edge proxy.
nginx snippet
Audit third-party scripts that request clipboard-write permissions
Frequently Asked Questions
How do clipboard hijackers work?
They detect when you copy a cryptocurrency address and swap it with the attacker’s wallet address before you paste.