{"id":26647217,"url":"https://github.com/offirmo/security-experiment-rogue-npm-module","last_synced_at":"2025-07-02T21:32:52.631Z","repository":{"id":65491153,"uuid":"77994433","full_name":"Offirmo/security-experiment-rogue-npm-module","owner":"Offirmo","description":"This is an experiment of a rogue npm module. DO NOT INSTALL !","archived":false,"fork":false,"pushed_at":"2017-01-05T09:21:17.000Z","size":6,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-06-29T01:02:58.414Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"unlicense","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Offirmo.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-01-04T07:59:28.000Z","updated_at":"2017-01-04T13:47:38.000Z","dependencies_parsed_at":"2023-01-25T18:45:19.020Z","dependency_job_id":null,"html_url":"https://github.com/Offirmo/security-experiment-rogue-npm-module","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/Offirmo/security-experiment-rogue-npm-module","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Offirmo%2Fsecurity-experiment-rogue-npm-module","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Offirmo%2Fsecurity-experiment-rogue-npm-module/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Offirmo%2Fsecurity-experiment-rogue-npm-module/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Offirmo%2Fsecurity-experiment-rogue-npm-module/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Offirmo","download_url":"https://codeload.github.com/Offirmo/security-experiment-rogue-npm-module/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Offirmo%2Fsecurity-experiment-rogue-npm-module/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":263218355,"owners_count":23432479,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-03-24T23:51:27.057Z","updated_at":"2025-07-02T21:32:52.565Z","avatar_url":"https://github.com/Offirmo.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# security-experiment-rogue-npm-module\nThis is an experiment of a rogue npm module. DO NOT INSTALL !\n\n## context\nIn the context of my current mission, I'm doing research on JS security and how to prevent some kind of security breach.\nThis is a demo for a presentation to my company.\n\n## Details\nThis module, once required (exposes an innocent «hello world» method),\nwill try to hook into JS standard API to intercept plain objects with interesting keys (aka. \"password\").\nIt will then try to exfiltrate them via different methods.\n\nThis is a proof of concept. No sensitive data should be at risk BUT you'd rather not use it with truly sensitive data.\n\nOnly tested in latest Chrome browser environment (this is a proof of concept !)\n\nTypescript compatible.\n\n## Follow up\nI then like to experiment counter-measures. If I have time and motivation...\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foffirmo%2Fsecurity-experiment-rogue-npm-module","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Foffirmo%2Fsecurity-experiment-rogue-npm-module","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foffirmo%2Fsecurity-experiment-rogue-npm-module/lists"}