nvdataflow 0.0.1.dev1__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
nvdataflow/__init__.py
ADDED
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import warnings
|
|
2
|
+
warnings.warn(
|
|
3
|
+
"WARNING: This is a security placeholder package. "
|
|
4
|
+
"The package name 'nvdataflow' was identified as vulnerable to dependency confusion "
|
|
5
|
+
"targeting NVIDIA's nvidia-resiliency-ext (208K monthly downloads). "
|
|
6
|
+
"If you are seeing this message, your project may have a misconfigured dependency. "
|
|
7
|
+
"See: https://github.com/nickvdp/MDAVI-Research",
|
|
8
|
+
stacklevel=2,
|
|
9
|
+
)
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: nvdataflow
|
|
3
|
+
Version: 0.0.1.dev1
|
|
4
|
+
Summary: Security placeholder - this package name is vulnerable to dependency confusion attacks targeting nvidia-resiliency-ext (NVIDIA Corporation).
|
|
5
|
+
Home-page: https://github.com/nickvdp/MDAVI-Research
|
|
6
|
+
Author: Kartik Singh
|
|
7
|
+
Author-email: omnigodz@proton.me
|
|
8
|
+
License: MIT
|
|
9
|
+
Requires-Python: >=3.6
|
|
10
|
+
Description-Content-Type: text/markdown
|
|
11
|
+
Dynamic: author
|
|
12
|
+
Dynamic: author-email
|
|
13
|
+
Dynamic: description
|
|
14
|
+
Dynamic: description-content-type
|
|
15
|
+
Dynamic: home-page
|
|
16
|
+
Dynamic: license
|
|
17
|
+
Dynamic: requires-python
|
|
18
|
+
Dynamic: summary
|
|
19
|
+
|
|
20
|
+
# nvdataflow - Security Placeholder
|
|
21
|
+
|
|
22
|
+
This package was registered as a security placeholder to prevent dependency confusion attacks.
|
|
23
|
+
|
|
24
|
+
## Affected packages
|
|
25
|
+
|
|
26
|
+
- `nvidia-resiliency-ext` (208K monthly downloads, NVIDIA Corporation)
|
|
27
|
+
|
|
28
|
+
This package lists `nvdataflow` as an extras dependency. The name was unregistered on PyPI, making it vulnerable to supply chain attacks.
|
|
29
|
+
|
|
30
|
+
## Research
|
|
31
|
+
|
|
32
|
+
Discovered by [MDAVI Research](https://github.com/nickvdp/MDAVI-Research) - an automated supply chain vulnerability detection platform.
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
nvdataflow/__init__.py,sha256=qLl0aTwuvZZAXDNBsAbbk-Dn-y8NNDDJIn0QBIGAhQo,414
|
|
2
|
+
nvdataflow-0.0.1.dev1.dist-info/METADATA,sha256=1ege2sCm6J-a2a5VHqdBYNItHOX--jgGYtKBD94p3ws,1079
|
|
3
|
+
nvdataflow-0.0.1.dev1.dist-info/WHEEL,sha256=DnLRTWE75wApRYVsjgc6wsVswC54sMSJhAEd4xhDpBk,91
|
|
4
|
+
nvdataflow-0.0.1.dev1.dist-info/top_level.txt,sha256=GGyJrqR30HKSLV27CpnmnedYWQtlN6dLn6ulMwTXxiw,11
|
|
5
|
+
nvdataflow-0.0.1.dev1.dist-info/RECORD,,
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
nvdataflow
|