Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим.
С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов.
Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров.
PyPI new user and new project registrations temporarily suspended
Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки.
Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе.
Чтобы избежать подобных факапов я рекомендую:
▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров.
▫️ Используйте файл requirements.txt вместо ручной установки пакетов
▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации.
▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию.
▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости.
Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг.
#offtop
Oops, we did it again 🤣
#BBUSDT has achieved 9th TP in 2 hours in our VIP HTL channel!
$203 in profits with a 5% entry and a $1000 deposit!
Feels good to be a Propheta VIP, man... 🏖ACCESS TO MANUAL TRADING for 70usdt/month
👉 We know how to earn 3-4-5 digit amounts without any deposit, with zero risk! Click the link, then START >>> Referral Program
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#buycrypto#cryptobot#cryptomarket
Oops, we did it again 🤣
#BBUSDT has achieved 9th TP in our VIP HTL channel!
$213 in profits with a 5% entry and a $1000 deposit!
ACCESS TO MANUAL TRADING for 70usdt/month
💪Rule the market with Propheta AI Signals: ultra-sharp alerts, full-on process automation, and a killer Cornix synergy — your fast track to max profits! GET THE ACCESS TO AI SIGNALS
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#trading#buybtc#tradingindicator
Oops, we did it again 🤣
#BBUSDT has reached 9th TP in the VIP HTL signals channel!👍
Easy $202 with a 5% entry and a $1000 deposit!
Every day we're on fire! 🔥🔥🔥ACCESS TO MANUAL TRADING for 70usdt/month
👉 Multiplying deposits every day!
Not convinced? Contact us for a free trial - @propheta_help
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#tradingviewindicator#tradingview#bitcoin
Now that's trading 👆🔥🔥🔥
#BBUSDT has just reached 9th TP in the VIP HTL channel!!!
Trade took just 2 hours! 👍
Easy $206 with a 5% entry and a $1000 deposit!
ACCESS TO MANUAL TRADING for 70usdt/month
👉 In our VIP community, not only will your deposit grow, but your skill as a trader as well!
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#tradingview#eth#trading
Now that's trading 👆🔥🔥🔥
#BBUSDT has achieved 9th TP in our VIP HTL channel!
With a 5% entry and a $1000 deposit, you could've earned $204!
That's why we call it the "Money Printer" 💴💷💵ACCESS TO MANUAL TRADING for 70usdt/month
💰Turn data into gains with Propheta AI Analyzer: deep AI analysis spots trends with surgical precision, tweaks in seconds to your goals, and pair hunting pumps your trading to the next level — this is the evolution of the game! GET THE ACCESS
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#cryptonews#AItrading#autotrading
👆 OMG! Would you look at that 👀
#BBUSDT reached 9th TP!
Signal from our VIP HTL channel!
Easy $210 with a 5% entry and a $1000 deposit!
That's why we call it the "Money Printer" 💴💷💵ACCESS TO MANUAL TRADING for 70usdt/month
👉 How to earn every month with zero risk?
Become Propheta partner with zero investment required!
Click the link, then START >>> Referral Program
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#tradingviewindicator#tradingindicator#buycrypto
👍 This is why we're here!
Reached 9th TP on our #BBUSDT trade! 🔥🔥🔥
With a 5% entry and a $1000 deposit, you could've earned $207!
Every day we're on fire! 🔥🔥🔥ACCESS TO MANUAL TRADING for 70usdt/month
👉 We're sure that 99% of the signals channels simply cannot provide transparent performance reports like we do! Check it out - @propheta_reports
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#cryptotrading#tradingview#buycrypto
👍 This is why we're here!
#BBUSDT has achieved 9th TP in our VIP HTL channel!
$211 in profits with a 5% entry and a $1000 deposit!
That's why we call it the "Money Printer" 💴💷💵ACCESS TO MANUAL TRADING for 70usdt/month
📊Dominate the market with Propheta AI Analyzer: AI uncovers hidden patterns with razor-sharp analysis, adapts on the fly with slick customization, and delivers next-level pair hunting — your edge for strategic supremacy! GET THE ACCESS
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#CryptoSignal#trading#crypto
Reached 9th TP in 14 hours on our #BBUSDT trade! 🔥🔥🔥
Using a 5% entry you could've earned $199 with a $1000 deposit
ACCESS TO MANUAL TRADING for 70usdt/month
👉 It's time to get a moneyprinter of your own!
Get access: t.me/ProphetaAdmin_bot
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#cryptochannel#bitcoin#AItrading
👍 This is why we're here!
#BBUSDT has just reached 9th TP in the VIP HTL channel!!!👍
$205 in profits with a 5% entry and a $1000 deposit!
ACCESS TO MANUAL TRADING for 70usdt/month
👉 Multiplying deposits every day!
Not convinced? Contact us for a free trial - @propheta_help
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#crypto#AItrader#cryptonews
Oops, we did it again 🤣
#BBUSDT has just reached 9th TP in the VIP HTL channel!!!
Trade took just 87 minutes! 👍
Using a 5% entry you could've earned $209 with a $1000 deposit
🤑 All this profit could have been yours! 🔥ACCESS TO MANUAL TRADING for 70usdt/month
👉 Love the profits you're seeing, but can't afford the VIP cost?
Earn over $40 per one recommendation with zero risk using our referral program!
Click the link, then START >>> Referral Program
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#tradingbot#tradingindicator#cryptobot
👆 OMG! Would you look at that 👀
#BBUSDT has achieved 9th TP in our VIP HTL channel!
You could've earned $213 with a 5% entry and a $1000 deposit!
Every day we're on fire! 🔥🔥🔥ACCESS TO MANUAL TRADING for 70usdt/month
👉 We will keep posting about how we earn money. Will you keep watching how someone else does it, or start earning yourself? Subscribe using our telegram bot: t.me/ProphetaAdmin_bot
Register and get bonuses up to $6,000
Binance | OKX | ByBit👈🏻click!
#cryptobot#cryptocurrency#crypto