2 ms·

Popular Python and PHP libraries hijacked to steal AWS keys

• patates 4y ago
  It feels like we are hearing more and more package-repository drama/hacks recently. Did the popularity of npm wake the hackers up or is it the reporting?
• OJFord 4y ago
  In a hurry: pip freeze | sed -n 's/^ctx==.+/not safe/p' && echo safe (Well, 'safe' might be a bit strong... 'not known not safe by a single metric' ;))
• RandomWorker 4y ago
  Does anyone know of a resource that keeps track of these attacks such that we can respond to these messages?