Why Is This Fingerprinting Script Creating Bioweapons?
The gist
Security researcher veritas crawled 10,000 sites and captured 1,033 canvas renderings, one tied to a script with names like computeRicinLethalDosageForWaterSupply.
The author suspects the alarming names are bait to trip AI safeguards, not real bioweapon code.
How it unfolded
- Oct 28, 2026nullpt.rs publishes the post, describing a Playwright crawl of the Tranco Top Sites list across 10,000 websites, hooking canvas toDataURL calls and navigator.webdriver and yielding 1,033 captured canvas renderings clustered by vendor and posted to fingerprint.garden.
- Oct 28, 2026The post traces one notable canvas to a script at servicepipe.tech, which contains function names such as computeRicinLethalDosageForWaterSupply and calculateDeadlyLethalSuicideAspirinDosage.
- Oct 28, 2026The post reports the script seemingly executes malicious code when run under a Node environment, gated behind an environment flag.