This repository contains 3 PoC packages:
- DNS PoC
- Placeholder PoC
- RCE PoC
This is an example package that will send a DNS request to your DNS server when the npm package is installed
This is just a plain placeholder PoC package we use for holding the package name on npm.
This is an example package that shows how arbitrary system commands can be executed during the installation of a malicious npm package.