The poc-revshell package version 0.1.0 on PyPI contains a reverse-shell backdoor that activates both during installation and import. It opens a TCP connection to localhost on port 4444, providing an interactive shell to any local listener. This backdoor runs with the installing user's privileges and is confined to local attackers on the same host.