@olb/synack-dependency-confusion-poc 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -0
- package/package.json +9 -0
package/README.md
ADDED
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# PoC - Synack Dependency Confusion (authorized)
|
|
2
|
+
|
|
3
|
+
This package **defensively reserves the `@olb` npm scope** as part of an authorized Synack SRT engagement (DRONE-W003), so that no malicious actor can squat the scope while triage and internal client verification are in progress.
|
|
4
|
+
|
|
5
|
+
- No code, no install/lifecycle scripts, no callbacks — benign placeholder only.
|
|
6
|
+
- Not affiliated with or endorsing the trademark owner; reserved defensively.
|
|
7
|
+
- Contact: via the Synack platform (report/triage) to arrange scope hand-over or removal.
|
package/package.json
ADDED
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "@olb/synack-dependency-confusion-poc",
|
|
3
|
+
"version": "1.0.0",
|
|
4
|
+
"description": "PoC - Synack Dependency Confusion - authorized DRONE-W003 defensive scope reservation. Not malicious. No code/scripts. Reserving @olb so it cannot be squatted during triage.",
|
|
5
|
+
"keywords": ["synack", "poc", "dependency-confusion", "defensive-namespace-reservation"],
|
|
6
|
+
"license": "MIT",
|
|
7
|
+
"author": "Synack SRT (ravenous) - authorized PoC",
|
|
8
|
+
"repository": "n/a - defensive PoC placeholder"
|
|
9
|
+
}
|