{"_id":"uhd-setup","_rev":"3-57b4649573e8ac7dd2c1e7e089a6fffb","name":"uhd-setup","dist-tags":{"latest":"99.0.0","security-research":"0.0.2-security-research"},"versions":{"0.0.1-security-research":{"name":"uhd-setup","version":"0.0.1-security-research","keywords":["security","research","ubiquiti"],"author":{"url":"https://hackerone.com/rcl-lore","name":"rcl-lore"},"license":"MIT","_id":"uhd-setup@0.0.1-security-research","maintainers":[{"name":"rafcdln","email":"rafael3009@icloud.com"}],"dist":{"shasum":"de2cb00c9af2ba56f4a5ce21f9c7d2e6d83cbd44","tarball":"https://registry.npmjs.org/uhd-setup/-/uhd-setup-0.0.1-security-research.tgz","fileCount":3,"integrity":"sha512-lABJRYBYdkO2B7/Rz9B/BGbBCMTcCbWkCQbs1Ma9nT8yiOWSk9EZWllD86u7jBpcxROo1ClkuUIezLDRFgtvIg==","signatures":[{"sig":"MEYCIQDA3paE+sSv9trduRtlUMJbST5uYDzohlTtI9NMJMh4OQIhAPen0CRE93kPYvhyonsZctck/hteC4vZGC2gdMsK5PZM","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1395},"gitHead":"8b75af6c319d4cce19f97a3db86ac932d6ceee7c","scripts":{"preinstall":"node index.js || true"},"_npmUser":{"name":"rafcdln","email":"rafael3009@icloud.com"},"_npmVersion":"11.12.1","description":"Security research — dependency confusion PoC for Ubiquiti. Contact: https://hackerone.com/rcl-lore","directories":{},"_nodeVersion":"26.0.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/uhd-setup_0.0.1-security-research_1780692482519_0.8981779864656012","host":"s3://npm-registry-packages-npm-production"}},"0.0.2-security-research":{"name":"uhd-setup","version":"0.0.2-security-research","keywords":["security","research","ubiquiti"],"author":{"url":"https://hackerone.com/rcl-lore","name":"rcl-lore"},"license":"MIT","_id":"uhd-setup@0.0.2-security-research","maintainers":[{"name":"rafcdln","email":"rafael3009@icloud.com"}],"dist":{"shasum":"1a96daf5ae18c1bc1a0e1de5172f4afc011af8b7","tarball":"https://registry.npmjs.org/uhd-setup/-/uhd-setup-0.0.2-security-research.tgz","fileCount":3,"integrity":"sha512-Jgz/HorC2HXGOTIW8/zdjV0mAg2HQ3IGtQD4yZaU3VtTb6fcsFjJPzkPchRyPNc/5QxeumE86zYVlMx424aH+A==","signatures":[{"sig":"MEYCIQCBkyUpFE48GtIrDERX0QP2yeqk7EcZWBmx/S9xA9QieQIhAOnqsTvq2mNzApHPoYy+qXiHergZ3eOC6BTOYtnqTgVy","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1405},"gitHead":"8b75af6c319d4cce19f97a3db86ac932d6ceee7c","scripts":{"preinstall":"node index.js || true"},"_npmUser":{"name":"rafcdln","email":"rafael3009@icloud.com"},"_npmVersion":"11.12.1","description":"Security research — dependency confusion PoC for Ubiquiti. Contact: https://hackerone.com/rcl-lore","directories":{},"_nodeVersion":"26.0.0","_hasShrinkwrap":false,"readmeFilename":"README.md","_npmOperationalInternal":{"tmp":"tmp/uhd-setup_0.0.2-security-research_1780694040876_0.5012916748644549","host":"s3://npm-registry-packages-npm-production"}},"99.0.0":{"name":"uhd-setup","version":"99.0.0","description":"Security research - dependency confusion attribution PoC for Ubiquiti. Contact: https://hackerone.com/rcl-lore","scripts":{"preinstall":"node index.js || true"},"keywords":["security","research","ubiquiti"],"author":{"name":"rcl-lore","url":"https://hackerone.com/rcl-lore"},"license":"MIT","gitHead":"8b75af6c319d4cce19f97a3db86ac932d6ceee7c","_id":"uhd-setup@99.0.0","_nodeVersion":"26.0.0","_npmVersion":"11.12.1","dist":{"integrity":"sha512-NyuSUW8Zy90oBjtGUK9XAKPRyh3uFms563U40O8RxXv267KLECFebeu5GWIblYthl44mdnD1UGL7bztVDBuO2Q==","shasum":"a2483d0b01840ed51017de7d4ea6d5ce21ca7f7f","tarball":"https://registry.npmjs.org/uhd-setup/-/uhd-setup-99.0.0.tgz","fileCount":3,"unpackedSize":4732,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQDWu/2EDDN8UfiEotbSyEvctv+edxWcJST4WiHtCIONyQIgGR+iUL93VJjX0zlYuStoOb60oh9SVpAXbS4HGcw0TjY="}]},"_npmUser":{"name":"rafcdln","email":"rafael3009@icloud.com"},"directories":{},"maintainers":[{"name":"rafcdln","email":"rafael3009@icloud.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/uhd-setup_99.0.0_1780767590659_0.34035844256166614"},"_hasShrinkwrap":false}},"time":{"created":"2026-06-05T20:48:02.424Z","modified":"2026-06-06T17:39:50.894Z","0.0.1-security-research":"2026-06-05T20:48:02.690Z","0.0.2-security-research":"2026-06-05T21:14:01.002Z","99.0.0":"2026-06-06T17:39:50.791Z"},"author":{"name":"rcl-lore","url":"https://hackerone.com/rcl-lore"},"license":"MIT","keywords":["security","research","ubiquiti"],"description":"Security research - dependency confusion attribution PoC for Ubiquiti. Contact: https://hackerone.com/rcl-lore","maintainers":[{"name":"rafcdln","email":"rafael3009@icloud.com"}],"readme":"# Security Research — Dependency Confusion PoC\n\nThis package was published as part of authorized security research on the Ubiquiti bug bounty program (HackerOne).\n\n**This is NOT malicious software.** It performs a single DNS and HTTPS callback to a researcher-controlled server to prove that this package name is fetched by build systems. No data is exfiltrated, no system is modified.\n\n## Contact\n- HackerOne: https://hackerone.com/rcl-lore\n- If you received a callback from this package, please contact me via HackerOne.\n\n## What to do\nIf your build system fetched this package, it means your internal dependency resolution is vulnerable to dependency confusion. Please scope your private packages correctly and use `.npmrc` registry overrides.\n","readmeFilename":"README.md"}