@vside/target-practice v0.0.1

Dependency Confusion Attack Distributed via VSCode

This project demonstrates dependency confusion attack via microsoft published vscode extensions.

Quick Start

1. start dns server: yarn dialTone
2. mimic installation postinstall script with yarn phoneHome (update nameServers in digger.ts to refer to the correct IP address. Remember to rebuild the project for this to work)