GPT-Proxy Backdoor in npm and PyPI turns Servers into Chinese LLM Relays

Two malicious packages published to npm (`kube-health-tools`) and PyPI (`kube-node-health`) install native droppers that fetch a stage‑2 Go RAT from GitHub, which establishes WebSocket/SSH-based Chisel tunnels to a C2 (sync.geeker.indevs.in), exposes an OpenAI‑compatible LLM proxy, SOCKS5, SSH/SFTP, and reverse tunnels to local services (including SSH and Vault). The droppers delete installation artifacts and rename processes to blend in; the report provides file hashes, network IOCs, process and path indicators, and discusses the risk of routed AI traffic being intercepted or manipulated.