strapi-plugin-rsh-meeb322k@3.6.8

Analysis

strapi-plugin-rsh-meeb322k@3.6.8 is a self-declared reverse-shell payload. Its package description reads "Reverse shell payload for Strapi", and its postinstall lifecycle hook executes postinstall.js (node postinstall.js) on install, running the payload on any machine that installs the package. The package was published under the name "strapi-plugin-rsh-meeb322k" and has since been removed from the registry; no further network IOCs were recoverable from the source.