cloudflare-cron-triggers

No clear evidence of intentional malware, data theft, backdoor behavior, cryptomining, or obfuscation is present. The principal security risk is an unauthenticated /api/manual-trigger endpoint that exposes privileged cleanup and storage operations and can be abused for repeated resource consumption. The code also exposes statistics and internal error messages, lacks validation of the external response, and contains an incomplete sendAlert fragment.