News for hackers. Stuff that matters.

A comment on 3500 packages uploaded to PyPI, pointing to a malicious URL.

Re:3500 packages uploaded to PyPI, pointing to a malicious URL by alisonkisk on Tuesday March 02, 2021 @10:06AM (#26316033)
Remember the 1990s when everyone mocked MS Outlook for downloading and running unverified software automatically?

Now Linux programmers do that intentionally via package managers.

[ Parent | on HN ]
Re:3500 packages uploaded to PyPI, pointing to a malicious URL by superluserdo on Tuesday March 02, 2021 @11:33AM (#26317071)
It's not unverified if it comes from an actually curated package repository, like the one on any given Linux distro. "Package maintainer" isn't just obsolete busywork, it's an essential part of a robust security model IMO.
[ Parent | on HN ]
Re:3500 packages uploaded to PyPI, pointing to a malicious URL by NateEag on Tuesday March 02, 2021 @11:06AM (#26316737)
Linux programmers realize that's what they're doing.

Outlook users probably didn't, most of the time.

[ Parent | on HN ]