xor-code-compiler

The code is not demonstrably malicious by itself, but it exposes a significant code-injection risk if `source` is attacker-controlled and the compiled object is subsequently executed. The supplied fragment contains no evidence of data theft or other malware behavior; validation, trusted-input restrictions, or removal of dynamic compilation is recommended.