Dozens of malicious PyPI packages discovered targeting developers

Re:Dozens of malicious PyPI packages discovered targeting de... by bt1a on Wednesday November 02, 2022 @03:23PM (#33441554)

Could you please share some resources/tactics for protecting your host machine from these development VMs? If I were to do this, I would want some assurances (never 100%) that my host is protected from the VM to the best of my ability.

(If it makes any difference, I would probably be using VMWare Workstation Pro)

[ Parent | on HN ]

Re:Dozens of malicious PyPI packages discovered targeting de... by namaria on Wednesday November 02, 2022 @06:52PM (#33443973)

I can't give you what you're looking for. You need to decide on the trade offs for yourself. There will always be a risk. Directed attacks can get out of VMs. You could slip up and log into a personal account inside the VM.

[ Parent | on HN ]

Re:Dozens of malicious PyPI packages discovered targeting de... by bt1a on Wednesday November 02, 2022 @09:53PM (#33445796)

I tried to make it clear in my reply that I understood there are no guarantees. What I’m asking is if you have any guidance on reducing the likelihood of these attacks succeeding

[ Parent | on HN ]