nexudus

The code appears to be a functional Nexudus API client, with no clear evidence of malware. However, the raw path action can send the Nexudus access token to a caller-selected external URL. Restrict absolute URLs to the configured Nexudus host, or omit Authorization for non-tenant hosts.