Is this m2cmds.php file an insecure third-party dev tool for Magento - or a malicious hacktool used by an attacker?