News for hackers. Stuff that matters.

A comment on Malicious Python Packages Replace Crypto Addresses in Developer Clipboards.

Re:Malicious Python Packages Replace Crypto Addresses in Dev... by substation13 on Monday November 07, 2022 @03:25PM (#33511872)
Python package version resolution is a Turing Complete problem and installs are not deterministic. Securing the ecosystem is going to be serious work.
[ Parent | on HN ]
Re:Malicious Python Packages Replace Crypto Addresses in Dev... by louislang on Monday November 07, 2022 @03:30PM (#33511956)
> Securing the ecosystem is going to be serious work

Oh it _absolutely_ is!

We're working extremely hard here and I think we're making great strides. More hard work to come, but I think it's absolutely worth the effort!

[ Parent | on HN ]
Re:Malicious Python Packages Replace Crypto Addresses in Dev... by xigoi on Monday November 07, 2022 @04:22PM (#33512664)
https://www.splitgraph.com/blog/poetry-dependency-resolver-s...
[ Parent | on HN ]
Re:Malicious Python Packages Replace Crypto Addresses in Dev... by louislang on Monday November 07, 2022 @04:35PM (#33512844)
This is wonderfully absurd in the best sort of way
[ Parent | on HN ]