linear-enterprise-rbac

The fragment is an RBAC integration implementation, not apparent malware. It contains a significant authorization flaw: transitionIssue can update an issue after only validating the state transition, without checking team access or canUpdateIssues. It also has a wildcard team-mapping bug and incomplete SSO provider implementations. No credential theft, suspicious network destinations, code execution, or destructive behavior is shown. Authorization context must be trusted and validated server-side, and every mutating operation should enforce both resource scope and role permissions.