3 ms·
Perhaps -- but not "definitely". It depends on what the frequency of each of those things is. So far IIUC the frequency of critical projects being removed from
by jph00 4y ago
Perhaps -- but not "definitely". It depends on what the frequency of each of those things is.
So far IIUC the frequency of critical projects being removed from pypi is 1 (in the space of a few days - although it came back), and account takeover of critical projects for malware publishing is 0 (in the space of many years).
- donaldstufft 4y ago- https://python-security.readthedocs.io/pypi-vuln/index-2022-05-24-ctx-domain-takeover.html https://python-security.readthedocs.io/pypi-vuln/index-2022-... - https://www.mend.io/resources/blog/npm-package-javascript-library-compromised-via-account-takeover/ https://www.mend.io/resources/blog/npm-package-javascript-li...
- jph00 4y agoThanks you - I stand corrected.