nx-cloud-api

The fragment appears to implement an Nx Cloud API CLI, not malware. However, accepting arbitrary absolute URL selectors and sending authentication headers to the resulting origin creates a significant credential-leak risk if selectors can be influenced by untrusted input. Restrict authenticated requests to trusted Nx Cloud origins and validate redirects.