3 ms·
It may be https://pytosquatting.org/ https://pytosquatting.org/. In that case it was indeed a harmless and quite useful PoC.
by sametmax 9y ago
It may be https://pytosquatting.org/ https://pytosquatting.org/. In that case it was indeed a harmless and quite useful PoC.
- hannob 9y agoNo. (Co-operator of pytosquatting here) While our code was similar in nature, it was non-obfuscated and we always threw an exception telling the user that he installed something he shouldn't.
- skrause 9y agoBut you still call an URL first, e.g. https://www.pytosquatting.org/pingback/pypi/urllib2/ https://www.pytosquatting.org/pingback/pypi/urllib2/ for "urllib2" before raising the exception. Though it is not an IP in China and only returns the text "Pingback from package urllib2 in repository pypi".