friendly-greeter-demo@1.0.1

Analysis

This package presents itself as a tiny educational greeting library, but its main module embeds a fully functional command-and-control backdoor that runs automatically when the module is imported. On load it collects the host name and platform and registers the victim with a hardcoded remote server over plain HTTP, then polls that server for a command. Any command returned is executed on the host via the system shell, and the combined stdout/stderr is sent back to the operator. All errors are silently suppressed to avoid detection. This gives the attacker arbitrary remote code execution on any machine that imports the package.