https://shops.schoolrp.net/src/js/login.js
https://shops.schoolrp.net/src/js/global.js
These are supposedly scripts for a login page which is https://shops.schoolrp.net/login
I would like some help in knowing if the code is vulnerable to any forms of attack, to extract login information, or to bypass the login.
This is a sort of revenge against someone, I've been asked to do for my friend
Could really love the help, 
Thanks,

R3stricted.