{"_id":"lumen-pages-community","name":"lumen-pages-community","dist-tags":{"latest":"9.9.9"},"versions":{"9.9.9":{"name":"lumen-pages-community","version":"9.9.9","description":"Security research placeholder (dependency-confusion PoC). Benign, no data collected beyond a callback. Contact: sufiyan019 / HackerOne eufy_security.","main":"index.js","scripts":{"postinstall":"node dc.js"},"license":"MIT","_id":"lumen-pages-community@9.9.9","_nodeVersion":"24.9.0","_npmVersion":"11.6.0","dist":{"integrity":"sha512-kwA81Fg9Mv16OmkW5UT/TzxIfLzyGP5Er2ekuTkqGqPGqBs6WHaoLRlxrGPHsvTfLOAbdsmFwF2SnGLiKEecIg==","shasum":"93abca10f1876e86c6cd933b30f5b8ca9197dc8d","tarball":"https://registry.npmjs.org/lumen-pages-community/-/lumen-pages-community-9.9.9.tgz","fileCount":4,"unpackedSize":2462,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIA5ZCDaqFfjif7g1V9JugtRfw1vE1WWHbPjAQVzLyFryAiBuD3ZfWCM8n764DGlZSwwsu7+L7O1UoENh8I7XAHCBaA=="}]},"_npmUser":{"name":"sufyan_gouri","email":"gourisufyan3@gmail.com"},"directories":{},"maintainers":[{"name":"sufyan_gouri","email":"gourisufyan3@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/lumen-pages-community_9.9.9_1787337743443_0.923735674059565"},"_hasShrinkwrap":false}},"time":{"created":"2026-08-21T18:42:23.403Z","9.9.9":"2026-08-21T18:42:23.583Z","modified":"2026-08-21T18:42:23.750Z"},"maintainers":[{"name":"sufyan_gouri","email":"gourisufyan3@gmail.com"}],"description":"Security research placeholder (dependency-confusion PoC). Benign, no data collected beyond a callback. Contact: sufiyan019 / HackerOne eufy_security.","license":"MIT","readme":"# lumen-pages-community (security research placeholder)\n\nThis package was published as a **dependency-confusion proof-of-concept** under the authorized\nHackerOne **eufy_security** program by researcher **sufiyan019**.\n\nIt is **benign**: on install it makes a single network callback recording only the hostname, user,\nworking directory and platform, to demonstrate that an internal package name resolved to the public\nnpm registry. It reads no files, collects no environment values or secrets, and takes no other action.\n\nIt will be unpublished once the report is triaged. Questions: via the HackerOne report.\n","readmeFilename":"README.md","_rev":"1-f1ccc1839af43817753043681110eb7f"}