Investigating a backdoored PyPI package targeting FastAPI applications

Re:Investigating a backdoored PyPI package targeting FastAPI... by flutas on Thursday November 24, 2022 @12:00PM (#33733526)

FYI: You left a name and email in the github history.

I know they are public via GH, but it feels weird to redact every piece of PII including avatar, then leaving a name and email in there.

[ Parent | on HN ]

Re:Investigating a backdoored PyPI package targeting FastAPI... by christophetd on Thursday November 24, 2022 @12:20PM (#33733793)

Thanks for the heads-up, the goal was mostly avoiding that typing the author's name in Google brings up this post. I'll have it blurred for the sake of consistency, though.

[ Parent | on HN ]