# anttiviljami/browser-autofill-phishing

A simple demo of phishing by abusing the browser autofill feature

Repository: https://github.com/anttiviljami/browser-autofill-phishing
Canonical: https://ross.abutalabs.com/products/browser-autofill-phishing
Homepage: https://anttiviljami.github.io/browser-autofill-phishing/
Language: JavaScript
License: MIT
License Family: permissive
Last push: 2021-06-05T14:12:23+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3527, "days_push": 1915, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1489, forks 117 (observed 2026-08-28T04:04:52.328747+00:00)

## What it is
A simple JavaScript demo showing how hidden form fields can be silently filled by browser autofill to phish user data. It demonstrates the security risk of browser autofill across Chrome, Safari, and Firefox.

## Use cases
- demonstrate browser autofill phishing risk
- show users how hidden form fields steal autofill data
- security awareness training about autocomplete
- test how different browsers handle autofill of hidden fields
- educate teams on why to avoid autocomplete on sensitive forms

## When to choose
- you need a hands-on demo of autofill phishing for security education
- you want to compare autofill behavior across Chrome, Safari, and Firefox

## When to avoid
- you need a production-ready phishing detection or prevention tool
- you want a library to integrate into an app rather than a demo page
- you need an actively developed project with recent updates

## Facets
- artifact type: application
- maturity: maintenance
- function: security, form-handling, developer-tools
- domain: security, web-development, privacy
- platform: browser
- tags: phishing-demo, browser-autofill, security-awareness, demo, web

## Member repositories
- anttiviljami/browser-autofill-phishing (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:52.328747+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:33:40.351468+00:00, confidence not recorded.
  - readme: https://github.com/anttiviljami/browser-autofill-phishing (fetched 2026-08-28T04:04:52.328747+00:00, sha 76f9281e290d)
  - homepage: https://anttiviljami.github.io/browser-autofill-phishing/ (fetched 2026-08-29T11:39:58.064684+00:00, sha 07e038f0e6ff)
  - registry_npm: https://registry.npmjs.org/browser-autofill-phishing (fetched 2026-08-29T11:39:58.073708+00:00, sha 163f3535e1c6)
- Data as of 2026-08-30T08:39:29.467469+00:00.