qwencloud-operate

The fragment is a readable Alibaba Cloud RAM policy, not malware. Its primary concern is excessive authorization: Resource '*' combined with ECS command execution, security-group changes, EIP reassignment, disk resizing, and broad DNS record management creates a significant blast radius. Scope resources and actions with least-privilege ARNs and policy conditions, and enforce the claimed command, port, CIDR, domain, and record restrictions outside or within the authorization layer.