jeecg-onlreport

The code is an administrative JeecgBoot report-management client and does not show clear malicious intent or malware. It does contain a significant transport-security weakness because TLS certificate and hostname verification are disabled, exposing the supplied access token to interception when HTTPS is used. It also exposes powerful remote report, menu, permission, and data-rule operations and produces an unescaped SQL statement for manual execution. Use only with trusted API URLs and controlled inputs, and enable normal TLS verification.