Num2words PyPI Package Compromised

Re:Num2words PyPI Package Compromised by vdupras on Monday July 28, 2025 @05:20PM (#44715821)

What a blast from the past, I created that library, what more than a decade ago? How simpler the world was back then. This was used by nobody except us for our little shitty use case. How noisy this project has become!

[ Parent | on HN ]

Re:Num2words PyPI Package Compromised by arjvik on Monday July 28, 2025 @08:48PM (#44717684)

who currently has control over the package on PyPI? wondering how it was compromised

[ Parent | on HN ]

Re:Num2words PyPI Package Compromised by vdupras on Monday July 28, 2025 @09:58PM (#44718122)

I have no idea, it hasn't been me for years.

[ Parent | on HN ]

Re:Num2words PyPI Package Compromised by tardyp on Tuesday July 29, 2025 @08:09AM (#44722284)

New maintainers never bothered to change the range.. History num2words is based on an old library, pynum2word, created by Taro Ogawa in 2003. Unfortunately, the library stopped being maintained and the author can't be reached. There was another developer, Marius Grigaitis, who in 2011 added Lithuanian support, but didn't take over maintenance of the project.

I am thus basing myself on Marius Grigaitis' improvements and re-publishing pynum2word as num2words.

Virgil Dupras, Savoir-faire Linux

[ Parent | on HN ]