model-poc-suhail@1.0.12

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

npm installation invokes the postinstall script.

A remote operator can execute commands with the installing user's privileges.

postinstall reverse shell over a TCP socket

The manifest invokes poc.js automatically after installation. That file spawns /bin/sh, opens a TCP connection to 0.tcp.in.ngrok.io:19775, and pipes the shell's standard input, output, and error streams through the connection, creating an install-time reverse shell.

Direct inspection confirms concrete install-time remote shell access, not merely a suspicious primitive. This is malicious behavior with no user action required beyond installing the package.