backend-graphql-patterns

No clear malicious behavior or supply-chain attack is present. The content is legitimate GraphQL Federation and subscription guidance. The main security concern is the unauthenticated-looking SSE endpoint that executes client-supplied subscription queries without demonstrated authorization or resource limits. The orderCreated subscription also lacks an explicit authentication check, and the plain HTTP service URLs should be secured with TLS where applicable. These issues warrant review before production use but do not indicate malware.