@flui-cloud/vops@0.1.1

High-risk behavior combination matched malicious policy.

User runs host key, monitor, backup, or agent CLI commands for an inventory host.

Can establish managed SSH access and scheduled remote monitoring on user-selected hosts.

SSH writes authorized_keys, cron entries, and monitoring scripts; configured relay receives heartbeats.

The scanner’s exfiltration and eval labels are not proof of malware: networking is package-aligned and Alpine is vendored UI code. The package nevertheless has meaningful, persistent remote-host administration capability that merits a warning.