News for hackers. Stuff that matters.

A comment on Dozens of malicious PyPI packages discovered targeting developers. Parent comment

Re:Dozens of malicious PyPI packages discovered targeting de... by cozzyd on Wednesday November 02, 2022 @06:58PM (#33444034)
Have you seen how much space a virtualenv uses? It can easily be >1 GB. For every project, this adds up. (Not to mention the bandwidth, which is not always plentiful).
[ Parent | on HN ]
Re:Dozens of malicious PyPI packages discovered targeting de... by dheera on Wednesday November 02, 2022 @07:20PM (#33444226)
4TB hard drives are $300 these days.
[ Parent | on HN ]
Re:Dozens of malicious PyPI packages discovered targeting de... by mardifoufs on Wednesday November 02, 2022 @11:24PM (#33446605)
4tb HDDs are closer to 80$ now, but that reinforces your point :). Even SSDs are now close to 300$ for 4tb!
[ Parent | on HN ]
Re:Dozens of malicious PyPI packages discovered targeting de... by dheera on Thursday November 03, 2022 @12:52PM (#33453851)
Yeah i meant 4TB SSDs, who uses magnetic HDDs anymore lol
[ Parent | on HN ]
Re:Dozens of malicious PyPI packages discovered targeting de... by hnbad on Thursday November 03, 2022 @09:26AM (#33450597)
Well, npm uses a cache so it won't re-download every package every time you install it.
[ Parent | on HN ]