query-profile 0.0.1__tar.gz

query_profile-0.0.1/.gitignore

@@ -0,0 +1,3 @@
+dist/
+*.egg-info/
+__pycache__/

query_profile-0.0.1/CLAIM_STEPS.md

@@ -0,0 +1,79 @@
+# 🚀 Quick Claim Steps — `query-profile` on PyPI
+
+> **Follow these steps to claim the `query-profile` package name on PyPI**
+> as a proof of concept for the dependency confusion vulnerability.
+
+---
+
+## Step 1: Create a PyPI Account
+
+1. Go to **https://pypi.org/account/register/**
+2. Enter: **Username**, **Email**, **Password**
+3. Verify your email (check your inbox)
+4. (Optional but recommended) Enable **Two-Factor Authentication**
+
+---
+
+## Step 2: Create an API Token
+
+1. Go to **https://pypi.org/manage/account/token/**
+2. Click **"Add API token"**
+3. Token name: `query-profile-claim`
+4. Scope: **Entire account** (or project-specific)
+5. **Copy the token** — it starts with `pypi-...` and you won't see it again!
+
+---
+
+## Step 3: Install Build Tools
+
+```bash
+pip install build twine
+```
+
+---
+
+## Step 4: Build & Upload the Package
+
+```bash
+# Go to the package directory
+cd poc_claim_query_profile/
+
+# Build the package
+python -m build
+
+# Upload to PyPI
+python -m twine upload dist/*
+# When prompted:
+#   Username: __token__
+#   Password: <paste-your-pypi-api-token>
+```
+
+---
+
+## Step 5: Verify It Worked
+
+```bash
+# Confirm it installs from PyPI
+pip install query-profile
+
+# Confirm it imports
+python -c "import query_profile; print('✅ Package claimed by L0bo!')"
+```
+
+You should see: `✅ Package claimed by L0bo!`
+
+---
+
+## ✅ Done! You've Claimed the Package
+
+The `query-profile` name is now registered on PyPI under your account.
+
+### Next Steps:
+
+- **View the package page**: https://pypi.org/project/query-profile/
+- **Delete the package** (if needed later): Go to the package settings on PyPI
+- **Report the vulnerability**: The full report is in `report_dependency_confusion_query_profile.md`
+
+---
+
+> ⚠️ **This package contains NO malicious code.** It's an empty, harmless package that simply proves the namespace was unclaimed. After demonstrating the vulnerability to Apple, you can delete the package from PyPI.

query_profile-0.0.1/PKG-INFO

@@ -0,0 +1,28 @@
+Metadata-Version: 2.4
+Name: query-profile
+Version: 0.0.1
+Summary: DEPENDENCY CONFUSION POC — This package name was unclaimed on PyPI. Claimed by security researcher to demonstrate the attack surface in Apple's ml-health-query-profiles repository.
+Author: L0bo
+License: MIT
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+
+# query-profile
+
+**⚠️ DEPENDENCY CONFUSION PROOF OF CONCEPT ⚠️**
+
+This package name (`query-profile`) was identified as **unclaimed on PyPI** while being directly referenced in Apple's official open-source repository:
+
+- **Repository**: [apple/ml-health-query-profiles](https://github.com/apple/ml-health-query-profiles)
+- **Affected file**: [docs/TUTORIAL.md](https://github.com/apple/ml-health-query-profiles/blob/HEAD/docs/TUTORIAL.md)
+- **Issue**: The tutorial instructs users to run `pip install query-profile`, but Apple never published this package to PyPI.
+
+This package is a **harmless proof of concept** — it does nothing except demonstrate that the package name was unclaimed and could be registered by an attacker. In a real attack, a malicious package under this name could:
+
+- Steal OpenAI/Anthropic/Azure API keys
+- Exfiltrate sensitive health query data
+- Install backdoors or persistence mechanisms
+
+---
+
+*This package was published for responsible disclosure purposes only. No malicious code is included.*

query_profile-0.0.1/README.md

@@ -0,0 +1,19 @@
+# query-profile
+
+**⚠️ DEPENDENCY CONFUSION PROOF OF CONCEPT ⚠️**
+
+This package name (`query-profile`) was identified as **unclaimed on PyPI** while being directly referenced in Apple's official open-source repository:
+
+- **Repository**: [apple/ml-health-query-profiles](https://github.com/apple/ml-health-query-profiles)
+- **Affected file**: [docs/TUTORIAL.md](https://github.com/apple/ml-health-query-profiles/blob/HEAD/docs/TUTORIAL.md)
+- **Issue**: The tutorial instructs users to run `pip install query-profile`, but Apple never published this package to PyPI.
+
+This package is a **harmless proof of concept** — it does nothing except demonstrate that the package name was unclaimed and could be registered by an attacker. In a real attack, a malicious package under this name could:
+
+- Steal OpenAI/Anthropic/Azure API keys
+- Exfiltrate sensitive health query data
+- Install backdoors or persistence mechanisms
+
+---
+
+*This package was published for responsible disclosure purposes only. No malicious code is included.*

query_profile-0.0.1/pyproject.toml

@@ -0,0 +1,17 @@
+[project]
+name = "query-profile"
+version = "0.0.1"
+description = "DEPENDENCY CONFUSION POC — This package name was unclaimed on PyPI. Claimed by security researcher to demonstrate the attack surface in Apple's ml-health-query-profiles repository."
+readme = "README.md"
+requires-python = ">=3.10"
+license = {text = "MIT"}
+authors = [
+    {name = "L0bo"},
+]
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["query_profile"]

query_profile-0.0.1/query_profile/__init__.py

@@ -0,0 +1,10 @@
+"""
+query-profile — DEPENDENCY CONFUSION POC
+
+This package exists solely to prove that the 'query-profile' name
+was unclaimed on PyPI while being referenced in Apple's documentation.
+
+No malicious functionality is included.
+"""
+
+__version__ = "0.0.1"

query_profile-0.0.1/query_profile/__main__.py

@@ -0,0 +1,14 @@
+"""
+query-profile — DEPENDENCY CONFUSION PROOF OF CONCEPT
+
+This package exists to demonstrate that the 'query-profile' name
+was unclaimed on PyPI while being referenced in Apple's official
+ml-health-query-profiles repository (https://github.com/apple/ml-health-query-profiles).
+
+This package contains NO malicious code. See README.md for details.
+"""
+
+if __name__ == "__main__":
+    print("query-profile: This is a dependency confusion proof-of-concept package.")
+    print("No malicious functionality is included.")
+    print("See: https://github.com/apple/ml-health-query-profiles")