Arbitrary command execution via unsanitized process keyword

OS command injection in all versions of xudafeng killing allows attackers to execute arbitrary commands through a crafted process keyword. The exported function concatenates the keyword into a ps and grep shell command, then passes the resulting string to child_process.exec without validation or quoting. Exploitation requires a caller to pass attacker-controlled text as the keyword and runs injected commands with the privileges of the invoking process.