OpenSSF/OSV advisory MAL-2026-3030 confirms this npm version as malicious. Package ships poc.js which requires child_process and spawns /bin/sh, connecting its stdin/stdout to a TCP socket at 0.tcp.in.ngrok.io:10023. This gives whoever controls that ngrok tunnel an unauthenticated interactive shell on the installer's host. Execution is triggered automatically by the package.json postinstall lifecycle hook (`"postinstall": "node poc.js"`), so the reverse shell fires on every `npm install`.
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in model-poc-suhail (npm)
Details
Package ships poc.js which requires child_process and spawns /bin/sh, connecting its stdin/stdout to a TCP socket at 0.tcp.in.ngrok.io:10023. This gives whoever controls that ngrok tunnel an unauthenticated interactive shell on the installer's host. Execution is triggered automatically by the package.json postinstall lifecycle hook (`"postinstall": "node poc.js"`), so the reverse shell fires on every `npm install`.
## Source: ossf-package-analysis (a174b5c81be71a696479861a28353965b3c60d17fb2f8a9a40f268113facbbf7) The OpenSSF Package Analysis project identified 'model-poc-suhail' @ 1.0.14 (npm) as malicious.
It is considered malicious because:
- The package communicates with a domain associated with malicious activity.
Decision reason
OpenSSF Malicious Packages via OSV confirms model-poc-suhail@1.0.13 as malicious (MAL-2026-3030): Malicious code in model-poc-suhail (npm)