server-access

This is an SSH administration utility, not evident malware. Its inspect feature deliberately executes arbitrary remote commands, and its JSON-based quoting does not reliably protect the remote shell from metacharacter interpretation; use only with trusted command input and configuration. It exposes the configured key path and remote command/output in its JSON response, but does not expose key contents. Severity is moderate and depends on who can supply the command and configuration.