News for hackers. Stuff that matters.

A comment on Malicious PyPI packages stealing credit cards and injecting code. Parent comment

Re:Malicious PyPI packages stealing credit cards and injecti... by stavros on Tuesday August 03, 2021 @01:09PM (#28051624)
Doesn't Poetry do this by default in its lockfile too?
[ Parent | on HN ]
Re:Malicious PyPI packages stealing credit cards and injecti... by c618b9b695c4 on Tuesday August 03, 2021 @01:54PM (#28052075)
There is an active PEP[0] for defining lockfiles.

0: https://www.python.org/dev/peps/pep-0665/

[ Parent | on HN ]