The gcli-control package on PyPI contains malicious code that installs a host daemon capable of executing commands received from a shared JSON document. This daemon allows any party with write access to the document to execute arbitrary code remotely, including credential theft, keylogging, webcam capture, and privilege escalation. The package includes hardcoded default identifiers and a bypass mechanism that disables encryption, enabling unauthenticated remote code execution and full remote-access trojan capabilities. Multiple versions of the package are affected.