Check if your current server is from common exploits. Which path

One famous nulled version (dubbed "cPanel Gold" from a 2020 leak) contained this gem in post_install.sh :

: Using unlicensed software violates terms of service and can lead to your hosting provider suspending your account or legal action from cPanel.

To make a nulled script work, the distributor must "clean" the code. This is where the depth of the danger lies:

Most "free" nulled scripts are distributed by third parties who inject malicious code. This can turn your server into a botnet node, steal your customers' data, or install ransomware.