deepstream-run-mv3dt

No clear indicators of supply-chain malware are present in the provided fragment itself (no credential theft, obfuscation, or explicit exfiltration logic). The primary security concern is operational/high-impact behavior: once explicitly approved, the script runs a container with --privileged and --net=host while mounting host directories into the container, significantly increasing blast radius if the container image or mounted inputs are untrusted or compromised. Additional risk may exist in the referenced offline/BEV capture components not included in this snippet.