functools-utils 0.0.1__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -0,0 +1,49 @@
|
|
|
1
|
+
"""RESEARCH ONLY - VersionSpecGuard slopsquatting PoC marker.
|
|
2
|
+
|
|
3
|
+
This package is a research artifact for the VersionSpecGuard study on LLM
|
|
4
|
+
package hallucination ("slopsquatting"). It provides NO functional utility.
|
|
5
|
+
|
|
6
|
+
What this package does:
|
|
7
|
+
- On import, prints a single research-marker line to stderr.
|
|
8
|
+
- That's it.
|
|
9
|
+
|
|
10
|
+
What this package does NOT do:
|
|
11
|
+
- Does NOT make any network requests (no HTTP, no DNS, no sockets).
|
|
12
|
+
- Does NOT read any files.
|
|
13
|
+
- Does NOT read any environment variables.
|
|
14
|
+
- Does NOT collect any data of any kind.
|
|
15
|
+
|
|
16
|
+
If you arrived here because an AI coding assistant (ChatGPT, Claude, Gemini,
|
|
17
|
+
GLM, DeepSeek, Qwen, etc.) suggested `pip install functools-utils`, you
|
|
18
|
+
were given a hallucinated recommendation. There is no such library; this
|
|
19
|
+
empty package exists only to make that hallucination visible.
|
|
20
|
+
|
|
21
|
+
See the accompanying paper for details:
|
|
22
|
+
"Slopsquatting on the 2026 Frontier: ..."
|
|
23
|
+
(authors redacted for double-blind review)
|
|
24
|
+
|
|
25
|
+
Contact: research@example.com
|
|
26
|
+
"""
|
|
27
|
+
from __future__ import annotations
|
|
28
|
+
import datetime
|
|
29
|
+
import os
|
|
30
|
+
import sys
|
|
31
|
+
|
|
32
|
+
__version__ = "0.0.1"
|
|
33
|
+
__author__ = "VersionSpecGuard Research"
|
|
34
|
+
__research_note__ = (
|
|
35
|
+
"This package is an LLM-hallucination marker (slopsquatting PoC). "
|
|
36
|
+
"It has no functionality. See module docstring for details."
|
|
37
|
+
)
|
|
38
|
+
|
|
39
|
+
|
|
40
|
+
def _emit_research_marker() -> None:
|
|
41
|
+
sys.stderr.write(
|
|
42
|
+
"[VSG-SLOPSQUATTING-POC] research marker: imported functools-utils "
|
|
43
|
+
f"at {datetime.datetime.now(datetime.UTC).isoformat()} "
|
|
44
|
+
f"pid={os.getpid()} "
|
|
45
|
+
"(this package collects no data; see README)\n"
|
|
46
|
+
)
|
|
47
|
+
|
|
48
|
+
|
|
49
|
+
_emit_research_marker()
|
|
@@ -0,0 +1,84 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: functools-utils
|
|
3
|
+
Version: 0.0.1
|
|
4
|
+
Summary: RESEARCH ONLY - VersionSpecGuard slopsquatting PoC. Not a real utility.
|
|
5
|
+
Author-email: VersionSpecGuard Research <research@example.com>
|
|
6
|
+
License: MIT
|
|
7
|
+
Project-URL: Homepage, https://github.com/YOUR-GITHUB/versionspecguard
|
|
8
|
+
Project-URL: Research Paper, https://YOUR-PAPER-LINK
|
|
9
|
+
Keywords: research,slopsquatting,supply-chain,llm-hallucination
|
|
10
|
+
Classifier: Development Status :: 2 - Pre-Alpha
|
|
11
|
+
Classifier: Intended Audience :: Science/Research
|
|
12
|
+
Classifier: License :: OSI Approved :: MIT License
|
|
13
|
+
Classifier: Programming Language :: Python :: 3
|
|
14
|
+
Classifier: Topic :: Security
|
|
15
|
+
Requires-Python: >=3.7
|
|
16
|
+
Description-Content-Type: text/markdown
|
|
17
|
+
License-File: LICENSE
|
|
18
|
+
Dynamic: license-file
|
|
19
|
+
|
|
20
|
+
# functools-utils
|
|
21
|
+
|
|
22
|
+
> ⚠️ **RESEARCH ONLY — NOT A REAL UTILITY PACKAGE**
|
|
23
|
+
>
|
|
24
|
+
> This package is an artifact of the VersionSpecGuard research study on
|
|
25
|
+
> LLM package hallucination ("slopsquatting"). It provides **no
|
|
26
|
+
> functionality**. It exists only to validate the slopsquatting attack
|
|
27
|
+
> kill chain described in the accompanying paper.
|
|
28
|
+
|
|
29
|
+
## What this package is
|
|
30
|
+
|
|
31
|
+
LLM coding assistants occasionally recommend `functools-utils` when asked
|
|
32
|
+
about Python utilities — but **no such library existed** before this
|
|
33
|
+
package. We registered the name to demonstrate that the attack surface
|
|
34
|
+
LLMs hallucinate is real and registrable.
|
|
35
|
+
|
|
36
|
+
## What this package does
|
|
37
|
+
|
|
38
|
+
On `import functools_utils`, it writes a single research marker line
|
|
39
|
+
to **stderr**. That's all.
|
|
40
|
+
|
|
41
|
+
```
|
|
42
|
+
[VSG-SLOPSQUATTING-POC] research marker: imported functools-utils at 2026-07-22T... pid=...
|
|
43
|
+
```
|
|
44
|
+
|
|
45
|
+
## What this package does NOT do
|
|
46
|
+
|
|
47
|
+
- ❌ Makes **no network requests** (no HTTP, no DNS, no sockets)
|
|
48
|
+
- ❌ Reads **no files**
|
|
49
|
+
- ❌ Reads **no environment variables**
|
|
50
|
+
- ❌ Collects **no data** of any kind
|
|
51
|
+
|
|
52
|
+
The full source is a single 40-line file — anyone can audit it in 30 seconds.
|
|
53
|
+
|
|
54
|
+
## Why does this exist?
|
|
55
|
+
|
|
56
|
+
If an AI coding assistant recommended `pip install functools-utils`, you
|
|
57
|
+
were given a hallucinated suggestion. The name "functools-utils" looks
|
|
58
|
+
plausible — it resembles stdlib `functools` plus a `-utils` suffix — but
|
|
59
|
+
there was never any such library. An attacker who registers such names
|
|
60
|
+
can get arbitrary code executed on developer machines when those
|
|
61
|
+
hallucinated recommendations are copy-pasted.
|
|
62
|
+
|
|
63
|
+
This package demonstrates the registration phase is feasible. It does
|
|
64
|
+
NOT demonstrate exploitation — it contains no payload.
|
|
65
|
+
|
|
66
|
+
## If you arrived here from an LLM recommendation
|
|
67
|
+
|
|
68
|
+
1. **Report the hallucination** to the LLM provider (OpenAI, Anthropic,
|
|
69
|
+
DeepSeek, GLM, etc.) via their feedback channels.
|
|
70
|
+
2. **You don't need this package** — uninstall it:
|
|
71
|
+
```bash
|
|
72
|
+
pip uninstall functools-utils
|
|
73
|
+
```
|
|
74
|
+
3. See the research paper for context: *Slopsquatting on the 2026
|
|
75
|
+
Frontier* (authors redacted for double-blind review).
|
|
76
|
+
|
|
77
|
+
## Contact
|
|
78
|
+
|
|
79
|
+
- Email: `research@example.com` (replace with real contact before upload)
|
|
80
|
+
- Paper: *Slopsquatting on the 2026 Frontier* (link TBD)
|
|
81
|
+
|
|
82
|
+
## License
|
|
83
|
+
|
|
84
|
+
MIT
|
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
functools_utils/__init__.py,sha256=LhUBgNShrP1wblaur4u0Tw2RD4TjFP9F2JwgqjFgtyc,1603
|
|
2
|
+
functools_utils-0.0.1.dist-info/licenses/LICENSE,sha256=8quo6sPAjaExvEW33J9PLNOnVtslOh1okpHz4zfNsQU,1082
|
|
3
|
+
functools_utils-0.0.1.dist-info/METADATA,sha256=BJRpak98iOpDa1T8UBxJLWLBLjDm46Hf8WBQHHD_DF4,3077
|
|
4
|
+
functools_utils-0.0.1.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
|
|
5
|
+
functools_utils-0.0.1.dist-info/top_level.txt,sha256=nD-2Q_yW3v7nf-ry0xS93l3IDtl05BsWcIyGBc0jyHs,16
|
|
6
|
+
functools_utils-0.0.1.dist-info/RECORD,,
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
MIT License
|
|
2
|
+
|
|
3
|
+
Copyright (c) 2026 VersionSpecGuard Research
|
|
4
|
+
|
|
5
|
+
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
6
|
+
of this software and associated documentation files (the "Software"), to deal
|
|
7
|
+
in the Software without restriction, including without limitation the rights
|
|
8
|
+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
9
|
+
copies of the Software, and to permit persons to whom the Software is
|
|
10
|
+
furnished to do so, subject to the following conditions:
|
|
11
|
+
|
|
12
|
+
The above copyright notice and this permission notice shall be included in all
|
|
13
|
+
copies or substantial portions of the Software.
|
|
14
|
+
|
|
15
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
16
|
+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
17
|
+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
18
|
+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
19
|
+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
20
|
+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
21
|
+
SOFTWARE.
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
functools_utils
|