azure-postgres

No clear malware or unauthorized exfiltration is evident. The script performs expected Azure and PostgreSQL administration, but unsafe SQL interpolation of the database argument and group display name can permit SQL injection or malformed grants. Use strict validation and proper SQL identifier/literal quoting; treat the admin grant as a high-impact privilege change.

The script has a legitimate administrative purpose and no clear malware indicators. However, unvalidated USER_UPN and DATABASE values are interpolated into SQL, creating SQL injection risk when inputs are attacker-controlled. The admin option intentionally grants substantial privileges; use it only for trusted users.