Merge pull request #6198 from projectdiscovery/npmrc-authtoken

Create npmrc-authtoken.yaml

exposures/files/npmrc-authtoken.yaml

@@ -0,0 +1,30 @@
+id: npmrc-authtoken
+
+info:
+  name: Hardcoded .npmrc AuthToken
+  author: geeknik
+  severity: high
+  reference:
+    - https://docs.npmjs.com/cli/v8/configuring-npm/npmrc
+    - https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-npm-registry
+  metadata:
+    verified: true
+    google-dork: intitle:"index of" ".npmrc"
+  tags: npm,exposure
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/.npmrc"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "_authToken="
+          - "_auth="
+        condition: or
+
+      - type: status
+        status:
+          - 200