scai-cloud-state 0.0.1.dev1__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. scai_cloud_state-0.0.1.dev1/PKG-INFO +32 -0
  2. scai_cloud_state-0.0.1.dev1/scai_cloud_state/__init__.py +9 -0
  3. scai_cloud_state-0.0.1.dev1/scai_cloud_state.egg-info/PKG-INFO +32 -0
  4. scai_cloud_state-0.0.1.dev1/scai_cloud_state.egg-info/SOURCES.txt +6 -0
  5. scai_cloud_state-0.0.1.dev1/scai_cloud_state.egg-info/dependency_links.txt +1 -0
  6. scai_cloud_state-0.0.1.dev1/scai_cloud_state.egg-info/top_level.txt +1 -0
  7. scai_cloud_state-0.0.1.dev1/setup.cfg +4 -0
  8. scai_cloud_state-0.0.1.dev1/setup.py +25 -0
scai_cloud_state-0.0.1.dev1/PKG-INFO ADDED
@@ -0,0 +1,32 @@
1
+ Metadata-Version: 2.4
2
+ Name: scai-cloud-state
3
+ Version: 0.0.1.dev1
4
+ Summary: Security placeholder - this package name is vulnerable to dependency confusion attacks targeting snowflake-code-unit-registry (Snowflake).
5
+ Home-page: https://github.com/nickvdp/MDAVI-Research
6
+ Author: Kartik Singh
7
+ Author-email: omnigodz@proton.me
8
+ License: MIT
9
+ Requires-Python: >=3.6
10
+ Description-Content-Type: text/markdown
11
+ Dynamic: author
12
+ Dynamic: author-email
13
+ Dynamic: description
14
+ Dynamic: description-content-type
15
+ Dynamic: home-page
16
+ Dynamic: license
17
+ Dynamic: requires-python
18
+ Dynamic: summary
19
+
20
+ # scai-cloud-state - Security Placeholder
21
+
22
+ This package was registered as a security placeholder to prevent dependency confusion attacks.
23
+
24
+ ## Affected packages
25
+
26
+ - `snowflake-code-unit-registry` (47K monthly downloads, Snowflake)
27
+
28
+ This package lists `scai-cloud-state` as an extras dependency. The name was unregistered on PyPI, making it vulnerable to supply chain attacks.
29
+
30
+ ## Research
31
+
32
+ Discovered by [MDAVI Research](https://github.com/nickvdp/MDAVI-Research) - an automated supply chain vulnerability detection platform.
scai_cloud_state-0.0.1.dev1/scai_cloud_state/__init__.py ADDED
@@ -0,0 +1,9 @@
1
+ import warnings
2
+ warnings.warn(
3
+ "WARNING: This is a security placeholder package. "
4
+ "The package name 'scai-cloud-state' was identified as vulnerable to dependency confusion "
5
+ "targeting Snowflake's snowflake-code-unit-registry (47K monthly downloads). "
6
+ "If you are seeing this message, your project may have a misconfigured dependency. "
7
+ "See: https://github.com/nickvdp/MDAVI-Research",
8
+ stacklevel=2,
9
+ )
scai_cloud_state-0.0.1.dev1/scai_cloud_state.egg-info/PKG-INFO ADDED
@@ -0,0 +1,32 @@
1
+ Metadata-Version: 2.4
2
+ Name: scai-cloud-state
3
+ Version: 0.0.1.dev1
4
+ Summary: Security placeholder - this package name is vulnerable to dependency confusion attacks targeting snowflake-code-unit-registry (Snowflake).
5
+ Home-page: https://github.com/nickvdp/MDAVI-Research
6
+ Author: Kartik Singh
7
+ Author-email: omnigodz@proton.me
8
+ License: MIT
9
+ Requires-Python: >=3.6
10
+ Description-Content-Type: text/markdown
11
+ Dynamic: author
12
+ Dynamic: author-email
13
+ Dynamic: description
14
+ Dynamic: description-content-type
15
+ Dynamic: home-page
16
+ Dynamic: license
17
+ Dynamic: requires-python
18
+ Dynamic: summary
19
+
20
+ # scai-cloud-state - Security Placeholder
21
+
22
+ This package was registered as a security placeholder to prevent dependency confusion attacks.
23
+
24
+ ## Affected packages
25
+
26
+ - `snowflake-code-unit-registry` (47K monthly downloads, Snowflake)
27
+
28
+ This package lists `scai-cloud-state` as an extras dependency. The name was unregistered on PyPI, making it vulnerable to supply chain attacks.
29
+
30
+ ## Research
31
+
32
+ Discovered by [MDAVI Research](https://github.com/nickvdp/MDAVI-Research) - an automated supply chain vulnerability detection platform.
scai_cloud_state-0.0.1.dev1/scai_cloud_state.egg-info/SOURCES.txt ADDED
@@ -0,0 +1,6 @@
1
+ setup.py
2
+ scai_cloud_state/__init__.py
3
+ scai_cloud_state.egg-info/PKG-INFO
4
+ scai_cloud_state.egg-info/SOURCES.txt
5
+ scai_cloud_state.egg-info/dependency_links.txt
6
+ scai_cloud_state.egg-info/top_level.txt
scai_cloud_state-0.0.1.dev1/scai_cloud_state.egg-info/top_level.txt ADDED
@@ -0,0 +1 @@
1
+ scai_cloud_state
scai_cloud_state-0.0.1.dev1/setup.cfg ADDED
@@ -0,0 +1,4 @@
1
+ [egg_info]
2
+ tag_build =
3
+ tag_date = 0
4
+
scai_cloud_state-0.0.1.dev1/setup.py ADDED
@@ -0,0 +1,25 @@
1
+ from setuptools import setup, find_packages
2
+
3
+ setup(
4
+ name="scai-cloud-state",
5
+ version="0.0.1.dev1",
6
+ description="Security placeholder - this package name is vulnerable to dependency confusion attacks targeting snowflake-code-unit-registry (Snowflake).",
7
+ long_description=(
8
+ "# scai-cloud-state - Security Placeholder\n\n"
9
+ "This package was registered as a security placeholder to prevent dependency confusion attacks.\n\n"
10
+ "## Affected packages\n\n"
11
+ "- `snowflake-code-unit-registry` (47K monthly downloads, Snowflake)\n\n"
12
+ "This package lists `scai-cloud-state` as an extras dependency. The name was unregistered on PyPI, "
13
+ "making it vulnerable to supply chain attacks.\n\n"
14
+ "## Research\n\n"
15
+ "Discovered by [MDAVI Research](https://github.com/nickvdp/MDAVI-Research) - "
16
+ "an automated supply chain vulnerability detection platform.\n"
17
+ ),
18
+ long_description_content_type="text/markdown",
19
+ author="Kartik Singh",
20
+ author_email="omnigodz@proton.me",
21
+ url="https://github.com/nickvdp/MDAVI-Research",
22
+ packages=find_packages(),
23
+ python_requires=">=3.6",
24
+ license="MIT",
25
+ )