tauri-app-sidecar-nodejs

The configuration appears to implement an intentional Node.js sidecar execution capability, with no direct malware indicators. Its main security concern is broad native-process execution with unrestricted arguments; untrusted renderer input should not be passed directly to the sidecar, and the sidecar should enforce strict argument validation. Review the effective scope of shell:default and the sidecar's argument handling.