News for hackers. Stuff that matters.

A comment on Devs unknowingly use “malicious” modules snuck into official Python repository. Parent comment

Re:Devs unknowingly use “malicious” modules snuck into offic... by btown on Sunday September 17, 2017 @10:06PM (#15272875)
The advisory has a regex, but it's not formatted well for copy-paste (non-ASCII quotes!). Here's a version that works:

    pip list –format=legacy | egrep ‘^(acqusition|apidev-coop|bzip|crypt|django-server|pwd|setup-tools|telnet|urlib3|urllib) ‘
[ Parent | on HN ]
Re:Devs unknowingly use “malicious” modules snuck into offic... by hexane360 on Sunday September 17, 2017 @10:56PM (#15273076)
It appears that your version has non-ascii quotes as well.
[ Parent | on HN ]
Re:Devs unknowingly use “malicious” modules snuck into offic... by heracles on Monday September 18, 2017 @01:13AM (#15273552)
It's the ',

pip list –format=legacy | egrep '^(acqusition|apidev-coop|bzip|crypt|django-server|pwd|setup-tools|telnet|urlib3|urllib) '

works for me

[ Parent | on HN ]
Re:Devs unknowingly use “malicious” modules snuck into offic... by btown on Monday September 18, 2017 @05:00PM (#15279520)
Haha - I copied the wrong version and couldn't tell the difference! Rookie mistake.
[ Parent | on HN ]