wsallin@1.0.0

Analysis

wsallin is a WebSocket proxy server that, when run, connects to the publisher's gRPC server at nzag[.]faiz[.]us.kg:5555 and registers as a monitoring agent using hardcoded credentials. The agent reports host system information (OS, CPU, memory, disk, network) and opens a bidirectional IOStream that allows the server to push tasks and spawn an interactive remote shell on the host (via node-pty, or fallback to script/python3 pty), giving the server operator command execution on any machine running the package. It also POSTs the node subscription URL to oooo[.]serv00[.]net for keepalive.