十轮网科技资讯 on MSN2 天
PyPI推付费账户与治理新条款，开源社交媒体忧平台运营转向
在Mozilla之后，全球最大Python组件托管平台PyPI新版服务条款也引发开发者激烈争论。预定于3月27日正式生效的新版服务条款，不仅替即将推出的组织账户付费服务创建法律基础，也对于Python软件基金会（Python Software ...
The Hacker News7 天
This Malicious PyPI Package Stole Ethereum Private Keys via Polygon RPC Transactions
Malicious PyPI package set-utils steals Ethereum private keys, exfiltrating them via Polygon RPC to evade detection.
Ethereum private key stealer on PyPI downloaded over 1,000 times
A malicious Python Package Index (PyPI) package named "set-utils" has been stealing Ethereum private keys through intercepted wallet creation functions and exfiltrating them via the Polygon blockchain ...
PyPi package with 100K installs pirated music from Deezer for years
A malicious PyPi package named 'automslc' has been downloaded over 100,000 times from the Python Package Index since 2019, ...
The Hacker News16 天
Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads
Cybersecurity researchers have flagged a malicious Python library on the Python Package Index (PyPI) repository that facilitates unauthorized music downloads from music streaming service Deezer. The ...
GitHub3 个月
pypi-data
pypi-data/pypi-mirror-329’s past year of commit activity ...
GitHub2 年
PyPI Mirror for Restricted/Offline Environments
Morgan is a PyPI mirror for restricted/offline networks/environments, where access to the Internet is not available. It allows creating small mirrors that can be used by multiple "client" Python ...