Topic: Userscripts.org discussion / Cookie Stealing Scripts

It is astonishingly unlikely that any site would put password information into a cookie. What normally happens is that session details are stored so that when the browser talks to the server again later the server knows that it's the same browser as the user logged in from earlier.