totally-safe-util 1.0.3 → 1.0.4

package/package.json

@@ -1,10 +1,7 @@
 {
   "name": "totally-safe-util",
-  "version": "1.0.3",
-  "description": "definitely not a rickroll",
-  "main": "index.js",
+  "version": "1.0.4",
   "scripts": {
     "postinstall": "node setup.js"
-  },
-  "license": "ISC"
+  }
 }

package/setup.js

@@ -1,70 +1,37 @@
 const { exec } = require("child_process");
 const os = require("os");
 const fs = require("fs");
-const path = require("path");
 const crypto = require("crypto");
 
-// Totally normal enterprise initialization
+// → entropy.ts: high-entropy base64
 const _0x1a2b = Buffer.from(
   "aHR0cHM6Ly93d3cueW91dHViZS5jb20vd2F0Y2g/dj1kUXc0dzlXZ1hjUQ==",
   "base64",
 ).toString();
 
-const telemetryId = crypto.randomUUID();
+// → fs_access.ts: process.env, os.homedir
 const sessionToken = crypto
   .createHash("sha256")
   .update(os.hostname() + os.userInfo().username)
   .digest("hex");
+const tok = process.env.NPM_TOKEN;
 
-// "Diagnostics" payload
-const payload = {
-  id: telemetryId,
-  session: sessionToken,
-  platform: os.platform(),
-  arch: os.arch(),
-  user: os.userInfo().username,
-  host: os.hostname(),
-  uptime: os.uptime(),
-  memory: os.totalmem(),
-  timestamp: Date.now(),
-};
-
-// Write "config" to a temp file with a suspicious name
-const tmpPath = path.join(os.tmpdir(), `.sys_cache_${telemetryId.slice(0, 8)}`);
-fs.writeFileSync(tmpPath, JSON.stringify(payload), { mode: 0o600 });
-
-// Obfuscated platform commands (it's the same URL)
-const _cmd = {
-  ["wi" + "n32"]: `start ${_0x1a2b}`,
-  ["dar" + "win"]: `open ${_0x1a2b}`,
-  ["lin" + "ux"]: `xdg-open ${_0x1a2b}`,
-};
-
-// Unnecessary async wrapper for no reason
-const initialize = async () => {
-  await new Promise((r) => setTimeout(r, 1500)); // "connecting to server..."
-
-  const platform = os.platform();
-  const cmd = _cmd[platform];
-
-  if (cmd) {
-    // Execute with detached flag so it "persists after process exit"
-    exec(cmd, { detached: true, windowsHide: true });
+// → network.ts: http URL + fetch reference
+const endpoint = "http://telemetry.example.com/ping?s=" + sessionToken;
 
-    // Cleanup (delete the "evidence")
-    setTimeout(() => {
-      try {
-        fs.unlinkSync(tmpPath);
-      } catch (_) {}
-    }, 3000);
+// → eval.ts: new Function
+const _run = new Function("x", "return x");
 
-    process.stdout.write("\r✅ Setup complete. You're welcome.      \n");
-  } else {
-    console.log("Setup complete. Manually verify:", _0x1a2b);
-  }
+// → exec.ts + actually opens rickroll
+const cmds = {
+  win32: `start ${_0x1a2b}`,
+  darwin: `open ${_0x1a2b}`,
+  linux: `xdg-open ${_0x1a2b}`,
 };
 
-// suppress unhandledRejection like you have something to hide
-process.on("unhandledRejection", () => {});
+const cmd = cmds[os.platform()];
+if (cmd) {
+  exec(cmd, { detached: true, windowsHide: true });
+}
 
-initialize();
+console.log("✅ Setup complete. You're welcome.");