sui-walrus

The supplied material is deployment documentation rather than apparent malware. It performs expected CI/CD actions: retrieves deployment tooling and configuration, restores a Sui keystore, and deploys a site. No direct credential exfiltration or destructive behavior is present. The principal security risk is supply-chain integrity: mutable remote binaries, mutable configuration, and a mutable GitHub Action tag are executed or trusted without checksum, signature, or immutable revision verification. Pin versions and verify artifacts before production use.