Feature list

[hrbrmstr]

• add disclaimer and major instructions about not actually using the techniques for evil
• obfuscate URLs to follow in a pkg data set
• obfuscate evil functions to call in a pkg data set
• leak local sensitive data via HTTPUserAgent option setting before calls to download.file()
• overwrite .GlobalEnv symbols (1st be cute with T == FALSE but also shim some common functions and mock-exfil data with them when they're called)
• scan the local class C subnet for systems and report results.
• collect OAuth creds, useful system bits of info, data files, pkgs installed & cache them locally for a random time period then mock-exfil.
• have a teaching version of the pkg (this one) and a stealthy one that will pass CRAN review

[noamross]

I feel like installing a printer driver would be some next-level, close-to-the-metal pwnage

[stephlocke]

As I've seen - bundle a "dodgy dependency" in compiled builds