3500 packages uploaded to PyPI, pointing to a malicious URL

Re:3500 packages uploaded to PyPI, pointing to a malicious URL by teddyh on Tuesday March 02, 2021 @09:31AM (#26315657)

I would think that an actual bad actor would choose an inconspicuous name, not a clear “IAmAGreyHat” name. But, of course, that’s what they’d want me to think, so who knows.

[ Parent | on HN ]

Re:3500 packages uploaded to PyPI, pointing to a malicious URL by luismedel on Tuesday March 02, 2021 @10:14AM (#26316109)

Continue and soon you’ll end playing an intelligence challenge in front of a iocaine-poisoned glass of wine :-)

[ Parent | on HN ]

Re:3500 packages uploaded to PyPI, pointing to a malicious URL by yborg on Tuesday March 02, 2021 @02:42PM (#26319548)

Jokes' on them, I've spent the last few years building up an immunity to iocaine powder.

[ Parent | on HN ]

Re:3500 packages uploaded to PyPI, pointing to a malicious URL by ivanbakel on Tuesday March 02, 2021 @01:17PM (#26318437)

What would be an inconspicuous name in this scenario? Unannounced typo-squatting is at best a greyhat activity - as the urban legend goes, better to be caught shagging the sheep than rustling it.

[ Parent | on HN ]

Re:3500 packages uploaded to PyPI, pointing to a malicious URL by minitoar on Tuesday March 02, 2021 @10:07AM (#26316041)

I would simply name myself IocainePowder

[ Parent | on HN ]