paperclip2@1.0.0

package.json declares a postinstall lifecycle script that runs `node -e` code opening a TCP connection to 185.112.147.174:7007 and piping the socket to a spawned /bin/sh, giving the operator of that endpoint an interactive shell on the installer's machine. The package ships no other functionality — its sole effect on install is to establish this reverse shell. Any developer workstation or CI job running `npm install paperclip2` is compromised with arbitrary code execution as the invoking user.