dinesh-dev-nagajikkktest11223qa v0.0.1-security
This is a sample package claimed for testing Dep-conf atck.
Hi, if you're reading this you're probably wondering what this code is doing on your machine. Don't worry! It doesn't do anything nasty or malicious.
I am an ethical security researcher, attempting attacks against organisations that have a "bug bounty" type program in place.
I am performing work similar to the work in this blog post: https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610
If your organisation has a bug bounty program my findings will be reported via that program.
If your organisation does not have a bug bounty program, you were not targeted by my work and have some how ended up getting included, any data reported from your org will be discarded.
All data I collect will be deleted as soon as I'm done, in either case.
3 years ago
3 years ago