wix-headless-fast

The fragment contains a potential shell command-injection vulnerability in the optional seed path: planPath is interpolated into an sh -c command inside double quotes, which does not block command substitution. The other subprocesses and file operations appear consistent with project setup. No clear evidence of malware or data exfiltration is present.