rexai-image-generation

This is an image-generation API client, not clear malware. The main security concern is that a result-provided image URL is fetched with the RexAI bearer token, potentially disclosing credentials to an untrusted host; the configurable base URL also receives the token and submitted image data. It additionally retries content-policy failures and may overwrite predictable output files. Overall severity is moderate and depends on trusting the configured API and its responses.