md-to-confluence

No overt malware (no backdoor/reverse shell/cryptomining) is present, and network activity is confined to a configured Confluence host. However, the script can upload attachments whose filepaths are derived from unvalidated markdown image references (md_dir / img_path) without preventing path traversal or absolute paths. If an attacker can influence markdown content or the referenced paths, this can lead to exfiltration of arbitrary local files to Confluence as attachments.