gpt-terminal-cli@1.0.0

Analysis

gpt-terminal-cli@1.0.0 is a trojanized AI-terminal-CLI package that installs a persistent remote-access implant. The postinstall hook spawns a detached background loader that boots an implant daemon with a watchdog that respawns it if killed. The implant beacons to C2 at hxxp://13[.]60[.]13[.]215:7771/implant using AES-256-GCM-encrypted, HMAC-signed envelopes, and supports keylogging, screen capture, clipboard monitoring, browser-credential theft, file exfiltration, LAN lateral scanning, privilege-escalation checks, anti-forensics, and a PTY reverse shell. It establishes multi-layer persistence: Windows registry Run/RunOnce keys, Startup-folder shortcut, WMI permanent event subscription, and Winlogon Shell override; Linux XDG autostart, a systemd user service, cron @reboot, and shell-profile injection; macOS LaunchAgent, login items, and shell-profile injection. It copies itself to hidden directories (~/.cache/.system on Linux, AppData\Roaming\Microsoft\Windows Helper on Windows) and deletes the original npm source after establishing persistence.