huawei-cloud-business-tf-support
Audited by Socket on Oct 9, 2026
2 alerts found:
Anomalyx2SUSPICIOUS. The declared purpose is Terraform billing/pricing support, but the body expands into broad Huawei resource-query behavior, creating a clear purpose-capability mismatch. There is no evidence of overt malware or third-party credential routing, and the likely API targets are official Huawei services, but the unseen environment-check/install scripts and credential-consuming local code prevent a benign classification.
The code appears to be an environment setup and Huawei Cloud credential-checking utility, not clear malware. However, globally disabling TLS verification and attempting to execute a remotely downloaded installer create a significant supply-chain and interception risk. Dependency installation and privileged system package installation also have security impact.