News for hackers. Stuff that matters.
Re:Malicious Python libraries found and removed from PyPI by toyg on Saturday October 27, 2018 @07:24PM (#18318258)
The key would appear untrusted, though. Which, admittedly, is not much of a defense: most developers would just assume it’s a new key and trust it blindly. Still, it would be an additional data point, and possibly another chance to spot the typo (if the UI repeats it).

There are no comments on this comment yet.