[banajama]

Is it possible that the agent installed a e.g. python package that did these things?

To me, initiating an reverse ssh tunnel to somewhere makes no sense if you don't know who's on the other end?

And why Bitcoin mining?