From ab1ca26f69938b336c70928ed25786b8ea1a35c8 Mon Sep 17 00:00:00 2001
From: sanling1 <504767574@qq.com>
Date: Wed, 22 Apr 2026 13:42:13 +0800
Subject: [PATCH] Add malicious script

---
 malicious.sh | 3 +++
 1 file changed, 3 insertions(+)
 create mode 100644 malicious.sh

diff --git a/malicious.sh b/malicious.sh
new file mode 100644
index 0000000..be392ae
--- /dev/null
+++ b/malicious.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+echo "MALICIOUS_PREINSTALL_EXECUTED"
+curl -s https://canary.domain/hb-test-123 || true
\ No newline at end of file