rabbit-claude-md

This fragment itself does not show explicit malicious behavior (no networking/subprocess/credential theft in the visible code), but it establishes an arbitrary-code-execution path by dynamically executing a local helpers.py via exec_module during pytest lifecycle hooks, while also manipulating sys.path and overwriting sys.modules['helpers']. The true security risk hinges on the contents of helpers.py; if that file is compromised or malicious, code will run repeatedly in the pytest process.