Re:3500 packages uploaded to PyPI, pointing to a malicious URL
by jjav on Wednesday March 03, 2021 @05:38AM
(#26326768)
> it is _good_ to black box things
... to teams you can 100% trust and whom are in the same sphere of responsibility. So yes, take a binary library blindly from the team down the hall who reports to the same VP.
From an unknown rando on the internet, not so much.
... to teams you can 100% trust and whom are in the same sphere of responsibility. So yes, take a binary library blindly from the team down the hall who reports to the same VP.
From an unknown rando on the internet, not so much.