Dozens of malicious PyPI packages discovered targeting developers

Re:Dozens of malicious PyPI packages discovered targeting de... by namaria on Wednesday November 02, 2022 @06:52PM (#33443973)

I can't give you what you're looking for. You need to decide on the trade offs for yourself. There will always be a risk. Directed attacks can get out of VMs. You could slip up and log into a personal account inside the VM.

[ Parent | on HN ]

Re:Dozens of malicious PyPI packages discovered targeting de... by bt1a on Wednesday November 02, 2022 @09:53PM (#33445796)

I tried to make it clear in my reply that I understood there are no guarantees. What I’m asking is if you have any guidance on reducing the likelihood of these attacks succeeding

[ Parent | on HN ]