e2e-failure-analyzer

No direct malware/backdoor/exfiltration logic is visible in this file. However, it executes external commands with `shell:true` (gh/npx) and—more importantly—extracts untrusted CI artifact zips using `unzip` without any explicit Zip Slip protection/sanitization. If an attacker can tamper with artifact contents (or cause the script to process malicious zips), this can plausibly lead to path traversal during extraction and unintended file writes/reads. Treat the package/script as risky when processing untrusted artifacts.