Password Manager “Malicious” Test Pages

These pages log fill behavior locally (no network).

Pages

Hidden / offscreen fields Swapped fields (race) Duplicate forms / confusion Same-origin iframe form Shadow DOM form

Tips

Open DevTools Console too (some managers log there).
Try both “autofill on page load” and “fill on user action”.
Try with extension locked vs unlocked.