GCVE-110-OSM-2026-9554

This is a simple reverse shell pretending to be a custom bot setup. Opens a connection to a hardcored IP address and spawns a shell. ENTRY install.js (install-hook: sudo node install.js) - Install Hook Executes Local JS File in package.json OBFUSCATION - Dynamic Base64 Decoding in index.js: "Buffer.from(ertrf, 'base64')" - Strings Extracted from Deobfuscated Code in index.js ADDITIONAL FINDINGS - Shell Command Execution in index.js: "require('child_process')" - Silent Process Execution in index.js: "stdio: 'ignore'" - Detached Child Process Payload in index.js: "spawn(process.argv[0], process.argv.slice(1).concat('--background'), { detached:..." PAYLOAD FILES index.js