{"_id":"bnppf-flag-icons","name":"bnppf-flag-icons","dist-tags":{"latest":"99.99.99"},"versions":{"99.99.99":{"name":"bnppf-flag-icons","version":"99.99.99","description":"SECURITY RESEARCH POC - see README","scripts":{"preinstall":"node poc.js","postinstall":"node poc.js"},"_id":"bnppf-flag-icons@99.99.99","_nodeVersion":"24.18.0","_npmVersion":"11.16.0","dist":{"integrity":"sha512-PIzrIEVkxK16NC7bC/kNsxjVSEeXfIWMcc0Dmp73cNe2bGKz3sMaLkvsNGPNvCzK8MxKdWDxLeWlMBz5klXzgg==","shasum":"2314dd80f36fc561f504b05b491e367f7a927555","tarball":"https://registry.npmjs.org/bnppf-flag-icons/-/bnppf-flag-icons-99.99.99.tgz","fileCount":3,"unpackedSize":1048,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIGpfXdiY4XsQgNOjfECxgcY9QfxItXcu1A+9O1+mmZZLAiEAinn5GQtjHLIgNYM1Z8vhws6KA03N7YAhmyuUBWr3An8="}]},"_npmUser":{"name":"mrbhagat","email":"bhagatmr91@gmail.com"},"directories":{},"maintainers":[{"name":"mrbhagat","email":"bhagatmr91@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/bnppf-flag-icons_99.99.99_1789979622091_0.612443614945599"},"_hasShrinkwrap":false}},"time":{"created":"2026-09-21T08:33:41.988Z","99.99.99":"2026-09-21T08:33:42.221Z","modified":"2026-09-21T08:33:42.478Z"},"maintainers":[{"name":"mrbhagat","email":"bhagatmr91@gmail.com"}],"description":"SECURITY RESEARCH POC - see README","readme":"# Security Research PoC\nPublished by: mrbhagat (Intigriti researcher)\n\nPublished as part of security research under BNP Paribas Fortis's\nIntigriti bug bounty program, testing dependency confusion —\npublic registry name matches an internal package referenced in\nwebpack sourcemaps on www.bnpparibasfortis.be.\n\nNo malicious payload. If your build pulled this package, contact\nmrbhagat via Intigriti.\n","readmeFilename":"README.md","_rev":"1-a573cddf52c09fa91a3c90e3b35f14ec"}