Can a javascript for a nui script contains a backdoor ?

https://github.com/TheExquis/ex-rental/releases/tag/v1.0.1

I downloaded this script, but the js is encrypted (like a LOT of legitimate script), but can it contains a backdoor or does it only runs client side ?