Credential stuffing tests stolen password lists against your login form until one matches. Here is how to spot the traffic ...
If you're considering PuppeteerSharp for PDF generation, here's the version of the story that doesn't show up in the "getting started" docs.