strapi-plugin-maylog-meeb@3.6.8

Analysis

The package's postinstall hook executes a reverse shell. It connects to 14[.]225[.]210[.]85:80 and spawns an interactive shell via python3 (socket + pty.spawn), retrying every 10 seconds up to 5 attempts and logging progress to /tmp/postinstall-revshell.log. Installing the package gives the remote host a shell on the installer's machine.