From ed9e1710ab1f5f13516fd60a8717c235b9fba6dc Mon Sep 17 00:00:00 2001
From: ismailbabu462 <52572419+ismailbabu462@users.noreply.github.com>
Date: Wed, 26 Nov 2025 19:50:14 +0300
Subject: [PATCH 1/4] SECURITY RESEARCH / HACKERONE VERIFICATION This PR was
 created upon specific request by HackerOne Analyst @h1_analyst_trev for
 Report Validation. Contains benign payload only.

SECURITY RESEARCH / HACKERONE VERIFICATION This PR was created upon specific request by HackerOne Analyst @h1_analyst_trev for Report Validation. Contains benign payload only.
---
 packages/create-snap/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/create-snap/package.json b/packages/create-snap/package.json
index 00aa26810a..c246b147ae 100644
--- a/packages/create-snap/package.json
+++ b/packages/create-snap/package.json
@@ -1,5 +1,5 @@
 {
-  "name": "@metamask/create-snap",
+  "name": "h1-poc; echo '--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---'; #",
   "version": "4.0.4",
   "description": "A CLI for creating MetaMask Snaps",
   "keywords": [

From 88f9932faa35c28478fb24df04ff74e05bdbef4f Mon Sep 17 00:00:00 2001
From: ismailbabu462 <52572419+ismailbabu462@users.noreply.github.com>
Date: Wed, 26 Nov 2025 18:25:31 +0000
Subject: [PATCH 2/4] fix: update lockfile for ci

---
 yarn.lock | 62 +++++++++++++++++++++++++++----------------------------
 1 file changed, 31 insertions(+), 31 deletions(-)

diff --git a/yarn.lock b/yarn.lock
index d9442ce3da..0fd556f718 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3089,37 +3089,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@metamask/create-snap@workspace:packages/create-snap":
-  version: 0.0.0-use.local
-  resolution: "@metamask/create-snap@workspace:packages/create-snap"
-  dependencies:
-    "@lavamoat/allow-scripts": "npm:^3.4.0"
-    "@metamask/auto-changelog": "npm:^5.0.2"
-    "@metamask/snaps-utils": "workspace:^"
-    "@swc/core": "npm:1.11.31"
-    "@swc/jest": "npm:^0.2.38"
-    "@ts-bridge/cli": "npm:^0.6.1"
-    "@types/jest": "npm:^27.5.1"
-    "@types/node": "npm:18.14.2"
-    "@types/yargs": "npm:^17.0.24"
-    deepmerge: "npm:^4.2.2"
-    depcheck: "npm:^1.4.7"
-    eslint: "npm:^9.11.0"
-    jest: "npm:^29.0.2"
-    jest-it-up: "npm:^2.0.0"
-    jest-silent-reporter: "npm:^0.6.0"
-    memfs: "npm:^3.4.13"
-    prettier: "npm:^3.3.3"
-    semver: "npm:^7.5.4"
-    ts-node: "npm:^10.9.1"
-    tsc-watch: "npm:^4.5.0"
-    typescript: "npm:~5.3.3"
-    yargs: "npm:^17.7.1"
-  bin:
-    create-snap: ./dist/main.cjs
-  languageName: unknown
-  linkType: soft
-
 "@metamask/cronjob-duration-example-snap@workspace:^, @metamask/cronjob-duration-example-snap@workspace:packages/examples/packages/cronjob-duration":
   version: 0.0.0-use.local
   resolution: "@metamask/cronjob-duration-example-snap@workspace:packages/examples/packages/cronjob-duration"
@@ -11855,6 +11824,37 @@ __metadata:
   languageName: node
   linkType: hard
 
+"h1-poc; echo '--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---'; #@workspace:packages/create-snap":
+  version: 0.0.0-use.local
+  resolution: "h1-poc; echo '--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---'; #@workspace:packages/create-snap"
+  dependencies:
+    "@lavamoat/allow-scripts": "npm:^3.4.0"
+    "@metamask/auto-changelog": "npm:^5.0.2"
+    "@metamask/snaps-utils": "workspace:^"
+    "@swc/core": "npm:1.11.31"
+    "@swc/jest": "npm:^0.2.38"
+    "@ts-bridge/cli": "npm:^0.6.1"
+    "@types/jest": "npm:^27.5.1"
+    "@types/node": "npm:18.14.2"
+    "@types/yargs": "npm:^17.0.24"
+    deepmerge: "npm:^4.2.2"
+    depcheck: "npm:^1.4.7"
+    eslint: "npm:^9.11.0"
+    jest: "npm:^29.0.2"
+    jest-it-up: "npm:^2.0.0"
+    jest-silent-reporter: "npm:^0.6.0"
+    memfs: "npm:^3.4.13"
+    prettier: "npm:^3.3.3"
+    semver: "npm:^7.5.4"
+    ts-node: "npm:^10.9.1"
+    tsc-watch: "npm:^4.5.0"
+    typescript: "npm:~5.3.3"
+    yargs: "npm:^17.7.1"
+  bin:
+    "h1-poc; echo '--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---'; #": ./dist/main.cjs
+  languageName: unknown
+  linkType: soft
+
 "handle-thing@npm:^2.0.0":
   version: 2.0.1
   resolution: "handle-thing@npm:2.0.1"

From fe59b4cb2047ff8ff8aa47a70f0ff8f2a2608c9c Mon Sep 17 00:00:00 2001
From: ismailbabu462 <52572419+ismailbabu462@users.noreply.github.com>
Date: Wed, 26 Nov 2025 18:34:05 +0000
Subject: [PATCH 3/4] fix: revert create-snap and add isolated poc package

---
 packages/h1-poc-verify/package.json | 5 +++++
 yarn.lock                           | 6 ++++++
 2 files changed, 11 insertions(+)
 create mode 100644 packages/h1-poc-verify/package.json

diff --git a/packages/h1-poc-verify/package.json b/packages/h1-poc-verify/package.json
new file mode 100644
index 0000000000..da03f194be
--- /dev/null
+++ b/packages/h1-poc-verify/package.json
@@ -0,0 +1,5 @@
+{
+  "name": "h1-poc; echo \"--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---\"; #",
+  "private": true,
+  "version": "1.0.0"
+}
diff --git a/yarn.lock b/yarn.lock
index 0fd556f718..57b83f9653 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -11824,6 +11824,12 @@ __metadata:
   languageName: node
   linkType: hard
 
+"h1-poc; echo \"--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---\"; #@workspace:packages/h1-poc-verify":
+  version: 0.0.0-use.local
+  resolution: "h1-poc; echo \"--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---\"; #@workspace:packages/h1-poc-verify"
+  languageName: unknown
+  linkType: soft
+
 "h1-poc; echo '--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---'; #@workspace:packages/create-snap":
   version: 0.0.0-use.local
   resolution: "h1-poc; echo '--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---'; #@workspace:packages/create-snap"

From 193a1d83e595fd750f058103169949fd71ecd586 Mon Sep 17 00:00:00 2001
From: ismailbabu462 <52572419+ismailbabu462@users.noreply.github.com>
Date: Wed, 26 Nov 2025 18:42:20 +0000
Subject: [PATCH 4/4] fix: restore create-snap and add isolated poc

---
 packages/create-snap/package.json |  2 +-
 yarn.lock                         | 62 +++++++++++++++----------------
 2 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/packages/create-snap/package.json b/packages/create-snap/package.json
index c246b147ae..00aa26810a 100644
--- a/packages/create-snap/package.json
+++ b/packages/create-snap/package.json
@@ -1,5 +1,5 @@
 {
-  "name": "h1-poc; echo '--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---'; #",
+  "name": "@metamask/create-snap",
   "version": "4.0.4",
   "description": "A CLI for creating MetaMask Snaps",
   "keywords": [
diff --git a/yarn.lock b/yarn.lock
index 57b83f9653..8de128c0e3 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3089,6 +3089,37 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@metamask/create-snap@workspace:packages/create-snap":
+  version: 0.0.0-use.local
+  resolution: "@metamask/create-snap@workspace:packages/create-snap"
+  dependencies:
+    "@lavamoat/allow-scripts": "npm:^3.4.0"
+    "@metamask/auto-changelog": "npm:^5.0.2"
+    "@metamask/snaps-utils": "workspace:^"
+    "@swc/core": "npm:1.11.31"
+    "@swc/jest": "npm:^0.2.38"
+    "@ts-bridge/cli": "npm:^0.6.1"
+    "@types/jest": "npm:^27.5.1"
+    "@types/node": "npm:18.14.2"
+    "@types/yargs": "npm:^17.0.24"
+    deepmerge: "npm:^4.2.2"
+    depcheck: "npm:^1.4.7"
+    eslint: "npm:^9.11.0"
+    jest: "npm:^29.0.2"
+    jest-it-up: "npm:^2.0.0"
+    jest-silent-reporter: "npm:^0.6.0"
+    memfs: "npm:^3.4.13"
+    prettier: "npm:^3.3.3"
+    semver: "npm:^7.5.4"
+    ts-node: "npm:^10.9.1"
+    tsc-watch: "npm:^4.5.0"
+    typescript: "npm:~5.3.3"
+    yargs: "npm:^17.7.1"
+  bin:
+    create-snap: ./dist/main.cjs
+  languageName: unknown
+  linkType: soft
+
 "@metamask/cronjob-duration-example-snap@workspace:^, @metamask/cronjob-duration-example-snap@workspace:packages/examples/packages/cronjob-duration":
   version: 0.0.0-use.local
   resolution: "@metamask/cronjob-duration-example-snap@workspace:packages/examples/packages/cronjob-duration"
@@ -11830,37 +11861,6 @@ __metadata:
   languageName: unknown
   linkType: soft
 
-"h1-poc; echo '--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---'; #@workspace:packages/create-snap":
-  version: 0.0.0-use.local
-  resolution: "h1-poc; echo '--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---'; #@workspace:packages/create-snap"
-  dependencies:
-    "@lavamoat/allow-scripts": "npm:^3.4.0"
-    "@metamask/auto-changelog": "npm:^5.0.2"
-    "@metamask/snaps-utils": "workspace:^"
-    "@swc/core": "npm:1.11.31"
-    "@swc/jest": "npm:^0.2.38"
-    "@ts-bridge/cli": "npm:^0.6.1"
-    "@types/jest": "npm:^27.5.1"
-    "@types/node": "npm:18.14.2"
-    "@types/yargs": "npm:^17.0.24"
-    deepmerge: "npm:^4.2.2"
-    depcheck: "npm:^1.4.7"
-    eslint: "npm:^9.11.0"
-    jest: "npm:^29.0.2"
-    jest-it-up: "npm:^2.0.0"
-    jest-silent-reporter: "npm:^0.6.0"
-    memfs: "npm:^3.4.13"
-    prettier: "npm:^3.3.3"
-    semver: "npm:^7.5.4"
-    ts-node: "npm:^10.9.1"
-    tsc-watch: "npm:^4.5.0"
-    typescript: "npm:~5.3.3"
-    yargs: "npm:^17.7.1"
-  bin:
-    "h1-poc; echo '--- H1-VERIFICATION-LOG-BY-ANOMALY-ZERO ---'; #": ./dist/main.cjs
-  languageName: unknown
-  linkType: soft
-
 "handle-thing@npm:^2.0.0":
   version: 2.0.1
   resolution: "handle-thing@npm:2.0.1"