News for hackers. Stuff that matters.

A comment on Investigating a backdoored PyPI package targeting FastAPI applications. Parent comment

Re:Investigating a backdoored PyPI package targeting FastAPI... by Alex3917 on Thursday November 24, 2022 @10:05AM (#33732070)
> Your threat model now must include the GitHub account of every maintainer of every open source project you use.

But GitHub is afaik the only site on the Internet that actually does account management correctly, so it least there is that.

[ Parent | on HN ]

There are no comments on this comment yet.