I'm explaining.
You don't believe it!!!! Guess what?
admin.js is a dev file compiled with Webpack. YES, not production

And yes, admin.js uses eval() to start JS. It's normal for webpack dev.
And yes - the module has a tracking code. And yes, the module has a small backdoor made by the author to delete the license Number remotely.
I deleted all of the malicious code made by the author of the module.
Check it out - the module doesn't send anything to their server.
But you're right - code suck.
@Root , by the way. I made your forum great again!
Where is my bonus