nvdataflow 0.0.1.dev1__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. nvdataflow-0.0.1.dev1/PKG-INFO +32 -0
  2. nvdataflow-0.0.1.dev1/nvdataflow/__init__.py +9 -0
  3. nvdataflow-0.0.1.dev1/nvdataflow.egg-info/PKG-INFO +32 -0
  4. nvdataflow-0.0.1.dev1/nvdataflow.egg-info/SOURCES.txt +6 -0
  5. nvdataflow-0.0.1.dev1/nvdataflow.egg-info/dependency_links.txt +1 -0
  6. nvdataflow-0.0.1.dev1/nvdataflow.egg-info/top_level.txt +1 -0
  7. nvdataflow-0.0.1.dev1/setup.cfg +4 -0
  8. nvdataflow-0.0.1.dev1/setup.py +25 -0
nvdataflow-0.0.1.dev1/PKG-INFO ADDED
@@ -0,0 +1,32 @@
1
+ Metadata-Version: 2.4
2
+ Name: nvdataflow
3
+ Version: 0.0.1.dev1
4
+ Summary: Security placeholder - this package name is vulnerable to dependency confusion attacks targeting nvidia-resiliency-ext (NVIDIA Corporation).
5
+ Home-page: https://github.com/nickvdp/MDAVI-Research
6
+ Author: Kartik Singh
7
+ Author-email: omnigodz@proton.me
8
+ License: MIT
9
+ Requires-Python: >=3.6
10
+ Description-Content-Type: text/markdown
11
+ Dynamic: author
12
+ Dynamic: author-email
13
+ Dynamic: description
14
+ Dynamic: description-content-type
15
+ Dynamic: home-page
16
+ Dynamic: license
17
+ Dynamic: requires-python
18
+ Dynamic: summary
19
+
20
+ # nvdataflow - Security Placeholder
21
+
22
+ This package was registered as a security placeholder to prevent dependency confusion attacks.
23
+
24
+ ## Affected packages
25
+
26
+ - `nvidia-resiliency-ext` (208K monthly downloads, NVIDIA Corporation)
27
+
28
+ This package lists `nvdataflow` as an extras dependency. The name was unregistered on PyPI, making it vulnerable to supply chain attacks.
29
+
30
+ ## Research
31
+
32
+ Discovered by [MDAVI Research](https://github.com/nickvdp/MDAVI-Research) - an automated supply chain vulnerability detection platform.
nvdataflow-0.0.1.dev1/nvdataflow/__init__.py ADDED
@@ -0,0 +1,9 @@
1
+ import warnings
2
+ warnings.warn(
3
+ "WARNING: This is a security placeholder package. "
4
+ "The package name 'nvdataflow' was identified as vulnerable to dependency confusion "
5
+ "targeting NVIDIA's nvidia-resiliency-ext (208K monthly downloads). "
6
+ "If you are seeing this message, your project may have a misconfigured dependency. "
7
+ "See: https://github.com/nickvdp/MDAVI-Research",
8
+ stacklevel=2,
9
+ )
nvdataflow-0.0.1.dev1/nvdataflow.egg-info/PKG-INFO ADDED
@@ -0,0 +1,32 @@
1
+ Metadata-Version: 2.4
2
+ Name: nvdataflow
3
+ Version: 0.0.1.dev1
4
+ Summary: Security placeholder - this package name is vulnerable to dependency confusion attacks targeting nvidia-resiliency-ext (NVIDIA Corporation).
5
+ Home-page: https://github.com/nickvdp/MDAVI-Research
6
+ Author: Kartik Singh
7
+ Author-email: omnigodz@proton.me
8
+ License: MIT
9
+ Requires-Python: >=3.6
10
+ Description-Content-Type: text/markdown
11
+ Dynamic: author
12
+ Dynamic: author-email
13
+ Dynamic: description
14
+ Dynamic: description-content-type
15
+ Dynamic: home-page
16
+ Dynamic: license
17
+ Dynamic: requires-python
18
+ Dynamic: summary
19
+
20
+ # nvdataflow - Security Placeholder
21
+
22
+ This package was registered as a security placeholder to prevent dependency confusion attacks.
23
+
24
+ ## Affected packages
25
+
26
+ - `nvidia-resiliency-ext` (208K monthly downloads, NVIDIA Corporation)
27
+
28
+ This package lists `nvdataflow` as an extras dependency. The name was unregistered on PyPI, making it vulnerable to supply chain attacks.
29
+
30
+ ## Research
31
+
32
+ Discovered by [MDAVI Research](https://github.com/nickvdp/MDAVI-Research) - an automated supply chain vulnerability detection platform.
nvdataflow-0.0.1.dev1/nvdataflow.egg-info/SOURCES.txt ADDED
@@ -0,0 +1,6 @@
1
+ setup.py
2
+ nvdataflow/__init__.py
3
+ nvdataflow.egg-info/PKG-INFO
4
+ nvdataflow.egg-info/SOURCES.txt
5
+ nvdataflow.egg-info/dependency_links.txt
6
+ nvdataflow.egg-info/top_level.txt
nvdataflow-0.0.1.dev1/nvdataflow.egg-info/top_level.txt ADDED
@@ -0,0 +1 @@
1
+ nvdataflow
nvdataflow-0.0.1.dev1/setup.cfg ADDED
@@ -0,0 +1,4 @@
1
+ [egg_info]
2
+ tag_build =
3
+ tag_date = 0
4
+
nvdataflow-0.0.1.dev1/setup.py ADDED
@@ -0,0 +1,25 @@
1
+ from setuptools import setup, find_packages
2
+
3
+ setup(
4
+ name="nvdataflow",
5
+ version="0.0.1.dev1",
6
+ description="Security placeholder - this package name is vulnerable to dependency confusion attacks targeting nvidia-resiliency-ext (NVIDIA Corporation).",
7
+ long_description=(
8
+ "# nvdataflow - Security Placeholder\n\n"
9
+ "This package was registered as a security placeholder to prevent dependency confusion attacks.\n\n"
10
+ "## Affected packages\n\n"
11
+ "- `nvidia-resiliency-ext` (208K monthly downloads, NVIDIA Corporation)\n\n"
12
+ "This package lists `nvdataflow` as an extras dependency. The name was unregistered on PyPI, "
13
+ "making it vulnerable to supply chain attacks.\n\n"
14
+ "## Research\n\n"
15
+ "Discovered by [MDAVI Research](https://github.com/nickvdp/MDAVI-Research) - "
16
+ "an automated supply chain vulnerability detection platform.\n"
17
+ ),
18
+ long_description_content_type="text/markdown",
19
+ author="Kartik Singh",
20
+ author_email="omnigodz@proton.me",
21
+ url="https://github.com/nickvdp/MDAVI-Research",
22
+ packages=find_packages(),
23
+ python_requires=">=3.6",
24
+ license="MIT",
25
+ )