byted-las-video-resize

The code is an environment bootstrap and auto-update script, not clear malware. Its main security concern is supply-chain exposure: it downloads and installs a remote Python wheel without cryptographic integrity verification, allowing compromise of the hosting service, transport endpoint, or artifact to result in code execution. The operator ID is also unsafely interpolated into a jq filter, and the script modifies the sourcing shell environment. Review and pin the artifact with a trusted hash or signature, validate the manifest, and pass OPERATOR_ID to jq as data.