hifi-download

SUSPICIOUS: the discovery features are coherent and mostly use standard packages, but the download portion expands trust to opaque/unspecified backends and a non-official TIDAL CLI while handling sensitive credentials. No clear exfiltration or malware is shown, yet the install provenance and credential handling for download services are insufficiently transparent for a benign low-risk classification.