poffice-admin

This is a Seafile administration client, not clearly malware, but it sends administrator credentials and tokens over HTTPS with certificate verification disabled to the configured server, defaulting to cloud[.]poffice[.]online. It also trusts server-returned upload and download URLs; in particular, an upload URL can receive both the API token and the selected local file. Severity is moderate due to credential exposure and insufficient URL validation; no obfuscation or destructive behavior is present.

This code provides document listing and upload functionality, sending the PAPERLESS_TOKEN credential and selected file contents to docs[.]poffice[.]online. Disabling TLS verification makes the credential and documents vulnerable to interception or server impersonation. The hardcoded destination warrants verification that it is the intended service; the fragment alone does not establish malicious intent. Severity is moderate due to credential and document exposure risk.