mev-protection

No direct malicious/backdoor behavior is evident in this module (no covert exfiltration, no obfuscation, no persistence, no dynamic execution). However, it is a high-privilege component: it signs and submits externally-specified transactions/bundles using a PRIVATE_KEY from the environment, meaning untrusted stdin can drive on-chain execution with spend capability from that key. This makes the primary risk operational/misuse-driven rather than malware-driven; integration controls (input validation, allowlists, least-privilege key management, and explicit user consent/confirmation) are essential.