News for hackers. Stuff that matters.

A comment on Devs unknowingly use “malicious” modules snuck into official Python repository. Parent comment

Re:Devs unknowingly use “malicious” modules snuck into offic... by jp_sc on Sunday September 17, 2017 @09:47PM (#15272815)
The list is in the advisory. Check if you have installed any of these:

  – acqusition (uploaded 2017-06-03 01:58:01, impersonates acquisition)
  – apidev-coop (uploaded 2017-06-03 05:16:08, impersonates apidev-coop_cms)
  – bzip (uploaded 2017-06-04 07:08:05, impersonates bz2file)
  – crypt (uploaded 2017-06-03 08:03:14, impersonates crypto)
  – django-server (uploaded 2017-06-02 08:22:23, impersonates django-server-guardian-api)
  – pwd (uploaded 2017-06-02 13:12:33, impersonates pwdhash)
  – setup-tools (uploaded 2017-06-02 08:54:44, impersonates setuptools)
  – telnet (uploaded 2017-06-02 15:35:05, impersonates telnetsrvlib)
  – urlib3 (uploaded 2017-06-02 07:09:29, impersonates urllib3)
  – urllib (uploaded 2017-06-02 07:03:37, impersonates urllib3)
[ Parent | on HN ]
Re:Devs unknowingly use “malicious” modules snuck into offic... by rajangdavis on Sunday September 17, 2017 @09:58PM (#15272846)
Really close call (I have the correct version of setuptools installed which is what had me worried).
[ Parent | on HN ]