MAL-2026-16231 Malicious code in strapi-plugin-honey-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752c0a1146068824e355a38b25add15f092d7cea6f846c143b5b2d2210de6766 The package's postinstall lifecycle script postinstall.js spawns a Python-based reverse shell that opens a TCP socket to the hardcoded IP...

Malicious code in strapi-plugin-honey-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752c0a1146068824e355a38b25add15f092d7cea6f846c143b5b2d2210de6766 The package's postinstall lifecycle script postinstall.js spawns a Python-based reverse shell that opens a TCP socket to the hardcoded IP...

Malicious code in strapi-plugin-conresh-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d117fca143f7c8f02261755b923b29cae47f8fdcca2f69f169e26a5601b3661a The package declares a postinstall lifecycle hook "postinstall": "node postinstall.js" that executes on every npm install. postinstall.js invokes...

MAL-2026-16229 Malicious code in strapi-plugin-conresh-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d117fca143f7c8f02261755b923b29cae47f8fdcca2f69f169e26a5601b3661a The package declares a postinstall lifecycle hook "postinstall": "node postinstall.js" that executes on every npm install. postinstall.js invokes...

MAL-2026-16230 Malicious code in strapi-plugin-feedmeeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecf1e41fb24d24ffe7b55319dda947ae30bfabb9266e38c17e1231cf4492ec5 [email protected] ships a package.json postinstall hook that executes postinstall.js on npm install. The script constructs a bash reverse...

Malicious code in strapi-plugin-feedmeeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecf1e41fb24d24ffe7b55319dda947ae30bfabb9266e38c17e1231cf4492ec5 [email protected] ships a package.json postinstall hook that executes postinstall.js on npm install. The script constructs a bash reverse...

Malicious code in strapi-plugin-portcc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f04ef6b35ce447e6825a520a88eda4fe27ebfe6214648906db673e7d57ea86b Package advertises itself as a Strapi plugin but ships no plugin functionality; the entire payload is postinstall.js, which is also declared as the...

MAL-2026-16238 Malicious code in strapi-plugin-portcc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f04ef6b35ce447e6825a520a88eda4fe27ebfe6214648906db673e7d57ea86b Package advertises itself as a Strapi plugin but ships no plugin functionality; the entire payload is postinstall.js, which is also declared as the...

Malicious code in strapi-plugin-maylog-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d714c1585f058d5ac528832398ffe2d0035fd8b60e97e461cdfa8e1533e851c The package's postinstall.js lifecycle script executes automatically on npm install and spawns a python3 reverse shell that connects to the hardcoded...

MAL-2026-16233 Malicious code in strapi-plugin-maylog-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d714c1585f058d5ac528832398ffe2d0035fd8b60e97e461cdfa8e1533e851c The package's postinstall.js lifecycle script executes automatically on npm install and spawns a python3 reverse shell that connects to the hardcoded...

Malicious code in strapi-plugin-listcc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bef6a3804e282781fb0eaea1ffd045ef3b236aefd0668de11549aba1ada8b0 [email protected] declares scripts.postinstall = 'node postinstall.js' and points main at the same file, so npm install auto-executes...

MAL-2026-16232 Malicious code in strapi-plugin-listcc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bef6a3804e282781fb0eaea1ffd045ef3b236aefd0668de11549aba1ada8b0 [email protected] declares scripts.postinstall = 'node postinstall.js' and points main at the same file, so npm install auto-executes...

Malicious Package

Overview strapi-plugin-pencc-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview strapi-plugin-ccsuc-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in strapi-plugin-pencc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4277c223cb7d5a9b8c263570a18670ee5054779862fbb801024a55629aa208 postinstall.js is registered as the package's postinstall script and runs automatically on npm install. It compares os.hostname to the hardcoded stri...

MAL-2026-16210 Malicious code in strapi-plugin-pencc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4277c223cb7d5a9b8c263570a18670ee5054779862fbb801024a55629aa208 postinstall.js is registered as the package's postinstall script and runs automatically on npm install. It compares os.hostname to the hardcoded stri...

MAL-2026-16209 Malicious code in strapi-plugin-ccsuc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb6207f1b4ec4d94c724583a5f32b85f68d203e1a9e6372705b410efbf9173a The package's postinstall lifecycle script postinstall.js, wired via scripts.postinstall in package.json checks the installer's hostname against a...

Malicious code in strapi-plugin-ccsuc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb6207f1b4ec4d94c724583a5f32b85f68d203e1a9e6372705b410efbf9173a The package's postinstall lifecycle script postinstall.js, wired via scripts.postinstall in package.json checks the installer's hostname against a...

Malicious Package

Overview strapi-plugin-yayccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview strapi-plugin-rs-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...