security-research-files 1.0.0

package/README.md

@@ -0,0 +1,10 @@
+# security-research-files
+
+## Disclaimer
+This package is intended for use in security research.
+You don't need this package in regular software developments, so you should only install it if you are sure you need it.
+
+At the point of initial publishing, this package only contains harmless files for testing purposes. Still, at some point, I may add scripts/programs that send DNS queries or connects to external servers, so please read the contents of the packages before installing this package.
+I can't take any responsibility for the damages caused by using this package.
+
+(I had to publish this package to demonstrate the impact of the security vulnerability I found.)

package/js/alert.js

@@ -0,0 +1 @@
+alert(document.domain)

package/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "security-research-files",
+  "version": "1.0.0",
+  "description": "This package is intended for use in security research",
+  "scripts": {
+    "postinstall": "echo \"You installed security-research-files. This package is intended for use in security research. If you are not sure what you are currently doing, please uninstall this package.\""
+  },
+  "author": "",
+  "license": "ISC"
+}