News for hackers. Stuff that matters.

A comment on 3500 packages uploaded to PyPI, pointing to a malicious URL. Parent comment

Re:3500 packages uploaded to PyPI, pointing to a malicious URL by goatinaboat on Tuesday March 02, 2021 @11:12AM (#26316813)
Someone"? Why don't public package managers like PyPI & npm require package owners to publish their real names and verify their identify, similar to WHOIS?

If you want a curated Python there’s Anaconda and ActiveState.

[ Parent | on HN ]

There are no comments on this comment yet.