The gcli-control PyPI package installs and runs a host daemon (`python -m gcli host`) that polls a shared JSON document at api.npoint.io for commands. Commands are decrypted and executed on the host machine, with results posted back encrypted. The daemon uses a hardcoded default rendezvous bin ID shared across all default installations, and a bypass password disables AES-GCM encryption, allowing anonymous unauthenticated command injection. The command dispatcher exposes over 200 operations, including browser password and cookie theft, keylogging, webcam capture, shell history access, Wi-Fi password theft, screenshots, user credential manipulation, and persistence mechanisms via Windows Run keys, systemd services, cron jobs, and startup folder launchers. It also includes privilege escalation modules. This combination constitutes a full remote-access trojan controlled by any party who knows the default rendezvous bin, affecting versions 0.5.0, 0.11.1, 0.12.2, and 0.12.4.

Any attacker who can write to the shared JSON document can remotely execute arbitrary code on all machines running the daemon with the default configuration. This includes stealing sensitive credentials and secrets, capturing keystrokes and webcam images, maintaining persistence on the host system, and escalating privileges. The threat enables complete host compromise and persistent remote access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix or official guidance is available, avoid installing or running the gcli-control package, especially versions 0.5.0, 0.11.1, 0.12.2, and 0.12.4. Remove any existing installations of this package and monitor for suspicious activity related to the daemon. Do not use the default rendezvous bin ID or the bypass password sentinel if overriding is possible.