frappe-tweaks-ac-rules-expert

The supplied material documents an access-control feature rather than containing evident malware. It intentionally supports raw SQL and executable Python filters, which are high-risk capabilities if Query Filter configuration is writable by untrusted users. The documented subquery example also interpolates `user` without escaping or parameterization and should not be used as written. No network, filesystem, credential theft, persistence, or sabotage behavior is shown.