"work a little". How is that relevant here?

The "T95" is likely an unbranded TV box and some people that bought it, got pre-installed malware in it. Is that the case with all T95 TV boxes? We don't know. Likely but we don't know.

Did the seller infect the TV boxes with the malware before selling? Probably.

Is this some malware that is implemented in the hardware of the TV box? Hell, no.