jfrog-init

This module is a local credential migration utility that extracts a token from the URL password component of matching marketplace/source entries, converts it into an `Authorization: Bearer ...` header, removes credentials from the URL, and overwrites the user’s Claude marketplace configuration files atomically. There is no direct evidence of malware behaviors in this snippet (no network calls, no command execution), but it performs security-sensitive handling and persistence of authentication material and suppresses errors, so its behavior should be reviewed in the broader context of how/why `moveTokenToHeader()` is invoked.