mysql

The code is an intended read-only MySQL query utility, not apparent malware. It handles database credentials and sends user-supplied SQL to configured MySQL servers, but there is no evidence of covert exfiltration or unauthorized persistence. The principal security concerns are incomplete SQL read-only enforcement, optional TLS disabling, non-enforced configuration permissions, and the fact that the supplied source is syntactically invalid. The code should not be used until repaired and the query authorization model is strengthened.