@marcan Ah yeah, the fact that this wasn't better tested to not trigger alarms (eg. in oss-fuzz / valgrind) was a bit amateurish.
I feel like the .so was engineered by a totally different group than the maintainer, or whoever is behind the maintainer persona. That thing is just bonkers in comparison. Even having all the code in front of me, it's very hard to tell what it does, whether it's further packed, or that it even is malware.