fraud-signals

SUSPICIOUS: the stub itself is low-impact and aligned with a defensive fraud-detection purpose, but it instructs installation of a separate third-party plugin, creating transitive trust and provenance ambiguity. No direct malware behavior, credential theft, or exfiltration is visible in this stub alone.