b24jssdk-recipes

No clear malware or intentional supply-chain sabotage is present. The code implements a plausible OAuth integration, but /install lacks webhook authenticity verification and directly persists attacker-controlled credentials. This can enable credential-store poisoning and unauthorized use of the profile endpoint's member credential selection. Add Bitrix24 webhook signature or equivalent authenticity validation, strict schema validation, atomic file updates, and stronger credential storage/access controls.