News for hackers. Stuff that matters.

A comment on 3500 packages uploaded to PyPI, pointing to a malicious URL. Parent comment

Re:3500 packages uploaded to PyPI, pointing to a malicious URL by hiq on Tuesday March 02, 2021 @11:48AM (#26317252)
Who decides who is a "trusted vendor", and how? You either give up on a lot of packages or end up in the current situation where everyone is trusted.
[ Parent | on HN ]

There are no comments on this comment yet.