hasura-graphql-engine

No evidence of malware, sabotage, credential theft, persistence, obfuscation, or suspicious exfiltration is present. The material is documentation with legitimate Hasura integration examples, but several examples are unsafe if copied directly: client-controlled payment amounts, unrestricted public file uploads, broad metadata permissions, admin-secret exposure risk, and unescaped HTML email content. These are security and design risks rather than malicious supply-chain behavior.