paid-ads-x

SUSPICIOUS: the wrapper's purpose is coherent with X Ads management, and same-org evidence for NotFair is credible, but the real instructions are hidden behind a delegated canonical file and all account data/actions are routed through a hosted third-party MCP service. This is not confirmed malware, but it carries medium risk due to mediated credential/data access and potential real-world account mutations.