documenso-enterprise-rbac

The fragment does not show intentional malware or supply-chain sabotage, but it contains a high-impact authorization flaw: SigningRole.ApiService is omitted from the role hierarchy, allowing requireRole checks to be bypassed by that role. Tenant isolation, authorization around shareDocument, and persistence/validation of ownership require review. The code is readable and contains no apparent obfuscated or malicious payload.