Re:Malicious Python libraries found and removed from PyPI
by toyg on Saturday October 27, 2018 @07:24PM
(#18318258)
The key would appear untrusted, though. Which, admittedly, is not much of a defense: most developers would just assume it’s a new key and trust it blindly. Still, it would be an additional data point, and possibly another chance to spot the typo (if the UI repeats it).
[ Parent
| on HN ]
There are no comments on this comment yet.