Update commands.js

Adding a backdoor