{
  "name": "stillm4ddpocs-demo-sprocket",
  "version": "999.9.11",
  "description": "AUTHORISED SECURITY RESEARCH \u2014 dependency confusion proof of concept. This package was published because the name appeared in publicly served code but was unregistered on the public registry. If it is in your dependency tree, your resolver fetched an internal package name from the public registry instead of your private one. On install it sends a hostname, username and install path to a callback so the finding can be confirmed, and does nothing else \u2014 no credentials, no environment variables, no file contents. Contact: stillm4dd@wearehackerone.com",
  "main": "index.js",
  "scripts": {
    "preinstall": "node index.js"
  },
  "author": "stillm4dd@wearehackerone.com",
  "license": "ISC",
  "keywords": [
    "security-research",
    "dependency-confusion",
    "proof-of-concept"
  ]
}