I’d like to look when I am home but I am scared to touch that shit too as I also have an acc there.

I wonder if this script can send a withdrawal request or change the withdrawal address though. Since it has an access to the client side, it can do whatever it wants.