security-audit

This fragment is security-training/reference material rather than apparent malware. It documents multiple vulnerable patterns and their secure alternatives. The vulnerable snippets would pose substantial application security risks if executed or copied into production, particularly JWT algorithm bypass/confusion, weak password hashing, arbitrary dynamic imports, temporary-file races, and ReDoS. No supply-chain attack behavior, data theft, persistence, or destructive activity is visible.