quarkclouddrive

This module is a high-impact supply-chain installer. It retrieves a remote config to determine a remote ZIP URL, downloads and unzips the package without shown integrity/signature verification, copies the extracted scripts into the installation directory, and then executes the installed Node entry script for verification. On Linux, it also bootstraps Node using privileged `curl | sudo bash` execution. While there is no explicit stealth/exfiltration logic visible in this Bash file, the permissive trust and download-and-execute pipeline make the overall package execution trust highly sensitive to upstream compromise, malicious package delivery, or tampering of remote responses.