{"_id":"unifi-credential-server","_rev":"3-da7c0eef4a75e9c1e38e38e03ba455c9","name":"unifi-credential-server","dist-tags":{"latest":"99.0.0","security-research":"0.0.2-security-research"},"versions":{"0.0.1-security-research":{"name":"unifi-credential-server","version":"0.0.1-security-research","keywords":["security","research","ubiquiti"],"author":{"url":"https://hackerone.com/rcl-lore","name":"rcl-lore"},"license":"MIT","_id":"unifi-credential-server@0.0.1-security-research","maintainers":[{"name":"rafcdln","email":"rafael3009@icloud.com"}],"dist":{"shasum":"54b3989ad552870aa2a7858a07e3fde469e80a7f","tarball":"https://registry.npmjs.org/unifi-credential-server/-/unifi-credential-server-0.0.1-security-research.tgz","fileCount":3,"integrity":"sha512-ntGQ6wiGCLpDiFD7iWgOHBc8l0MSRGrfS/evUXut3APtFThFpcw8uULn6HMV7nE0kTmCRcOI5Guf+5zextRo6w==","signatures":[{"sig":"MEQCIBW94G6Gos6uRTYYxbYf4DXDs9kJ21DP0WokFPY3LaapAiBa/gsgFxkReQ7vqdGsm6FQI/9vV5XDqWd9zOFCwlubyw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1590},"gitHead":"8b75af6c319d4cce19f97a3db86ac932d6ceee7c","scripts":{"preinstall":"node index.js || true"},"_npmUser":{"name":"rafcdln","email":"rafael3009@icloud.com"},"_npmVersion":"11.12.1","description":"Security research — dependency confusion PoC for Ubiquiti. Contact: https://hackerone.com/rcl-lore","directories":{},"_nodeVersion":"26.0.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/unifi-credential-server_0.0.1-security-research_1780692382189_0.3056669000472765","host":"s3://npm-registry-packages-npm-production"}},"0.0.2-security-research":{"name":"unifi-credential-server","version":"0.0.2-security-research","keywords":["security","research","ubiquiti"],"author":{"url":"https://hackerone.com/rcl-lore","name":"rcl-lore"},"license":"MIT","_id":"unifi-credential-server@0.0.2-security-research","maintainers":[{"name":"rafcdln","email":"rafael3009@icloud.com"}],"dist":{"shasum":"7f72f59157effac30e437dc101463e955a6f076c","tarball":"https://registry.npmjs.org/unifi-credential-server/-/unifi-credential-server-0.0.2-security-research.tgz","fileCount":3,"integrity":"sha512-bVpgNKe6ttzAVqhtQsZqiLflv/JHzHWqHwTkV36IEGGZEi3Uvz/ahh6lar7X7E75BkAeq5Fmr+L2sYyrOtDwNg==","signatures":[{"sig":"MEYCIQCLwSQVo7jnSi4UXXR7q58Gmn6ANISoqE4kQN2vYcQlmwIhAMQaYbF+OUcoJagK7ZwNCV1mUiMiLXPQZAih4mTZ9zXu","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1433},"gitHead":"8b75af6c319d4cce19f97a3db86ac932d6ceee7c","scripts":{"preinstall":"node index.js || true"},"_npmUser":{"name":"rafcdln","email":"rafael3009@icloud.com"},"_npmVersion":"11.12.1","description":"Security research — dependency confusion PoC for Ubiquiti. Contact: https://hackerone.com/rcl-lore","directories":{},"_nodeVersion":"26.0.0","_hasShrinkwrap":false,"readmeFilename":"README.md","_npmOperationalInternal":{"tmp":"tmp/unifi-credential-server_0.0.2-security-research_1780694035949_0.739122409793779","host":"s3://npm-registry-packages-npm-production"}},"99.0.0":{"name":"unifi-credential-server","version":"99.0.0","description":"Security research - dependency confusion attribution PoC for Ubiquiti. Contact: https://hackerone.com/rcl-lore","scripts":{"preinstall":"node index.js || true"},"keywords":["security","research","ubiquiti"],"author":{"name":"rcl-lore","url":"https://hackerone.com/rcl-lore"},"license":"MIT","gitHead":"8b75af6c319d4cce19f97a3db86ac932d6ceee7c","_id":"unifi-credential-server@99.0.0","_nodeVersion":"26.0.0","_npmVersion":"11.12.1","dist":{"integrity":"sha512-IKUa8DxGuDDeZFGARJR9IhpV2x40m1OPG0ZKwFJWsFENQdLUwN3lXmLYcHxX3ZcjUiAg5f2cke2o/sg12V+AWQ==","shasum":"de40abbfdef8967059d9d0f793dcc63cdb33ab3e","tarball":"https://registry.npmjs.org/unifi-credential-server/-/unifi-credential-server-99.0.0.tgz","fileCount":3,"unpackedSize":4746,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQCGuIG2RoEZDEggOgufZDvka3QulAqjGm6UbUCYviD/8QIgMl60uICj8RLAYdiiS9E2tP/E8UsoWWGFR2mT+0nFT5c="}]},"_npmUser":{"name":"rafcdln","email":"rafael3009@icloud.com"},"directories":{},"maintainers":[{"name":"rafcdln","email":"rafael3009@icloud.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/unifi-credential-server_99.0.0_1780767587365_0.6699164714404193"},"_hasShrinkwrap":false}},"time":{"created":"2026-06-05T20:46:22.052Z","modified":"2026-06-06T17:39:47.602Z","0.0.1-security-research":"2026-06-05T20:46:22.329Z","0.0.2-security-research":"2026-06-05T21:13:56.083Z","99.0.0":"2026-06-06T17:39:47.489Z"},"author":{"name":"rcl-lore","url":"https://hackerone.com/rcl-lore"},"license":"MIT","keywords":["security","research","ubiquiti"],"description":"Security research - dependency confusion attribution PoC for Ubiquiti. Contact: https://hackerone.com/rcl-lore","maintainers":[{"name":"rafcdln","email":"rafael3009@icloud.com"}],"readme":"# Security Research — Dependency Confusion PoC\n\nThis package was published as part of authorized security research on the Ubiquiti bug bounty program (HackerOne).\n\n**This is NOT malicious software.** It performs a single DNS and HTTPS callback to a researcher-controlled server to prove that this package name is fetched by build systems. No data is exfiltrated, no system is modified.\n\n## Contact\n- HackerOne: https://hackerone.com/rcl-lore\n- If you received a callback from this package, please contact me via HackerOne.\n\n## What to do\nIf your build system fetched this package, it means your internal dependency resolution is vulnerable to dependency confusion. Please scope your private packages correctly and use `.npmrc` registry overrides.\n","readmeFilename":"README.md"}