pptx

The module contains a high-confidence supply-chain backdoor: it executes a base64-decoded payload via eval at import time, which spawns a shell command and attempts an outbound /dev/tcp backconnect (reverse-shell style). This malicious activity occurs before any conversion function is called, making the package unsafe to use even if the HTML-to-PPTX logic appears otherwise plausible.