Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим.
С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов.
Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров.
PyPI new user and new project registrations temporarily suspended
Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки.
Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе.
Чтобы избежать подобных факапов я рекомендую:
▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров.
▫️ Используйте файл requirements.txt вместо ручной установки пакетов
▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации.
▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию.
▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости.
Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг.
#offtop
🎉Thank you for 10.000 followers!
Thank you all for commenting, reacting and sharing our posts. It is always great to hear back from you! You can always suggest a post or contact us through our bot @ChannelYTNBot
Stay tuned for more content!
YouTubeNews/ #milestone
A blend of US aggression and Venezuelan opposition collusion has all but sealed CITGO's destiny.
Discover how Washington and its local allies successfully acquired Venezuela's US-based refiner, valued at US $10-13 billion, by clicking here 👉🏽https://bit.ly/3OkSfn8. View and download the infographic in a single image.
Don't miss out on these insights!
#CITGO#Infographic#milestone
🚀 We did it!
Our community keeps growing stronger with over 90K Followers on X and more than 1 million on-chain transactions! 🚀💫
🎉 The numbers are still climbing, and we couldn't be more grateful for your support.
Together, we'll keep reaching new heights! 💪🔥
Read more and open treasure at: X Post
#Milestone#CommunityPower#Blockchain#Crypto
🎉 Milestone Alert! 🎉
SingSing has officially surpassed 1.2 MILLION on-chain transactions! 🚀
Thank you to our incredible community for making this possible. Here’s to many more milestones ahead! 💪✨
Read more and open treasure at: X Post
#SingSing#Blockchain#Milestone#OnChain#CryptoCommunity
New Milestone🚀🚀
We've just hit the milestone of 500,000 Web3 users utilizing SingSing SocialFi SDK! 🎉🚀
Thank you for your support and participation. This achievement showcases the strength and potential of the SingSing community! 💪✨
Keep exploring and enjoying the super cool features of SingSing! 💎🔥
#SingSing#Web3#SocialFi#Milestone#SDK
When discussing historic speeches, one stands out: President Hugo Chávez at the UN General Assembly on September 20, 2006.
He labeled U.S. President George W. Bush a war criminal and highlighted Western hypocrisy regarding democracy and peace—right from “the devil’s house.”
Chávez criticized the UN for its alignment with U.S. interests and called for reform led by the Global South. He underscored the ongoing struggle for change and the potential for a better future.
Click here to learn more and watch the key quotes 👉🏼https://shorturl.at/guOJh
#Milestone#HugoChávez#UN#Revolution
💎TMONK as you know, was born to spread the word of Telegram and its founder Durov.
We said that we want to become the first #crowdfunding and #charity platform and we are working on both fronts.
And so we are really proud to present the first AMBASSADOR on the #TONBlockchain regarding the charity sector.
A person of absolute morality and great devotion to the cause.
That who has already given part of his life to helping people in the field and who knows the ton chain deeply
👀👀👀Jeribond.ton🆒🆒🆒
Our Ambassador brings with a wealth of experiences and knowledge that make him an outstanding choice to represent TMONK. We are honored to have his leadership and inspiration to guide others on our journey.
This is the first step to build the foundation of a structure that can be the #milestone in this theme for ton chain
🤝 About Jeribond.ton🤝
After working in the humanitarian sector for 8 years, Jeribond.ton has just resigned and is focusing on Web3.
Jeribond.ton worked in the neonatal and maternal health sector for this while, because over here women face a lot of pregnancy complications and also newborn babies pre or post. So JERI worked in the community by training the health workers, doctors, and nurses to best carry out their duties using best practices that work in other countries, and this helped to reduce the rate of how women die.
Jeribond.ton was instrumental as he managed the supplies and supported the work in many ways; with a small team obtained funding from an international organization to carry out these projects.
BioCM - $TON$BNX - BD lead & Advisor @Tonraffles - @Roolznft $Fish OG @binaryniglions@https://t.me/tonnigeria @https://t.me/TonNomadsChat
This is a crucial step for the advancements of our project, and we are truly proud to announce this new and exciting collaboration. We aim to build something new, something incredible that can help all the people in need around the world.
FOR THEIR #FREEDOM
🎉100,000 Players and Counting!🎉
A huge THANK YOU to our incredible community for making SingSing Tycoon such a massive hit! 💥
Your support has helped us reach this amazing milestone, and we couldn’t have done it without you. 🙌
Here’s to many more tycoon adventures ahead! 🏗️💰
#SingSingTycoon#100KPlayers#Milestone#ThankYou#GameFi
🎤Announcement | Chat | X (Twitter) | Website | Game
We've reached our first major milestone: 100K+ followers on X!
🎉 We hope the next 100K comes quickly with your continued support and interest.
Thank you all! 🚀❤️
Read more and open treasure at: X Post
#100KFollowers#Milestone#Grateful#OnwardAndUpward