Metadata-Version: 2.4
Name: gatepay-sdk-python
Version: 99.99.1
Summary: Security research — dependency confusion PoC (bug bounty, no malicious payload)
Author: bytesnull
Requires-Python: >=3.6
Description-Content-Type: text/markdown
Dynamic: author
Dynamic: description
Dynamic: description-content-type
Dynamic: requires-python
Dynamic: summary

# gatepay-sdk-python

## This package has been claimed by bytesnull as part of authorized security research.

This is a **proof-of-concept** for a **dependency confusion** vulnerability, submitted under a responsible disclosure / bug bounty program.

### What this package does

- **No malicious code** is included.
- **No data is exfiltrated.**
- The only side effect is a single DNS resolution to a researcher-controlled subdomain to confirm whether the package was installed.

### Impact

If this package was installed in your environment, it means your build pipeline is vulnerable to dependency confusion attacks. An attacker could have used this vector to:

- Exfiltrate CI/CD secrets and environment variables
- Inject backdoors into build artifacts
- Achieve remote code execution on build servers

### Contact

**Researcher:** bytesnull  
**Disclosure:** Responsible disclosure via bug bounty program
