stripe

No evidence of malware or intentional malicious behavior. The proxy contains a critical access-control bug: treating '/' as a public prefix bypasses all authentication and subscription checks. Price identifiers also lack application-level validation, and webhook idempotency is susceptible to concurrent duplicate processing. Fix the proxy route matching before using this integration.