Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим.
С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов.
Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров.
PyPI new user and new project registrations temporarily suspended
Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки.
Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе.
Чтобы избежать подобных факапов я рекомендую:
▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров.
▫️ Используйте файл requirements.txt вместо ручной установки пакетов
▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации.
▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию.
▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости.
Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг.
#offtop
😁2 on 1 by Nicholas Meregali😁
➡️The 2-on-1 guard is one of the most reliable and beginner-friendly guards in jiu-jitsu. You don’t need high skill, complex movements, or years of experience to make it work.
➡️Why? Because the moment you pull the opponent’s arm across your center line, you take away their athletic power. Their ability to pressure, explode, or pass your guard drops instantly. This creates a stable, safe guard that works against any belt, any size, and any level of opponent.
$197😍$19.99😍
❗️Channel Info and FAQ (MUST CHECK BEFORE BUY)❗️
📱Payment: 📱📱📱
💰Submeta FOR FREE
👑MasterClass
✈️@bjjfanaticsinstructionals
#NicholasMeregali#Guard#Gi#NewWave
💁♀️Buy
💁♀️
🔥NEW RELEASE🔥
😁Loop Choke by Nicholas Meregali😁
➡️The Loop Choke is one of the most powerful and underrated submissions in Jiu-Jitsu.
➡️In this complete 2.5-hour series, Nicholas breaks down every layer of the position, from the core mechanics to advanced scenarios, covering how to attack from bottom. and top
$127😍$14.99😍
❗️Channel Info and FAQ (MUST CHECK BEFORE BUY)❗️
📱Payment: 📱📱📱
💰Submeta FOR FREE
🌈UFC Picks
👑MasterClass
✈️@bjjfanaticsinstructionals
#NicholasMeregali#Submission#Gi#NewWave
💁♀️Buy
💁♀️
🔥NEW RELEASE🔥
😁Half Guard by Nicholas Meregali😁
➡️Master the Half-Guard with 4 hours of step-by-step instruction designed to give you real control and understanding of this essential position. Learn to dominate in three key stages, Legs, Hips, and Shoulders, using each to solve specific problems and create clear, strategic progress.
➡️We start with the core concept of Camping, teaching you how to stabilize your position, manage pressure, and control posture through precise body placement over your opponent’s shields, hips, and frames, making your base extremely hard to off-balance.
$197😍$19.99😍
❗️Channel Info and FAQ (MUST CHECK BEFORE BUY)❗️
📱Payment: 📱📱📱
💰Submeta FOR FREE
🌈UFC Picks
👑MasterClass
✈️@bjjfanaticsinstructionals
#NicholasMeregali#NewWave#Gi#HalfGuard
💁♀️Buy
💁♀️
🔥NEW RELEASE🔥
😁Back Take by Nicholas Meregali😁
➡️Back Take System is a complete positional framework designed to teach you how to expose, enter, secure and finish the back with calm precision.
➡️Every movement inside this system is rooted in structure, balance manipulation, and mechanical advantage, allowing you to create openings without speed, explosiveness or risk.
$127😍$14.99😍
❗️Channel Info and FAQ (MUST CHECK BEFORE BUY)❗️
📱Payment: 📱📱📱
💰Submeta FOR FREE
👑MasterClass
✈️@bjjfanaticsinstructionals
#NicholasMeregali#Attacks#Gi#NewWave
💁♀️Buy
💁♀️
😁The Complete Jiu-Jitsu System Bundle by Nicholas Meregali😁
➡️This bundle gives you four complete courses, Mount, Half Guard, Lasso Guard, and Deep De La Riva X, all in one package. With over 20 hours of step-by-step instruction from Nicholas Meregali
$447😍$49.99😍
❗️Channel Info and FAQ (MUST CHECK BEFORE BUY)❗️
📱Payment: 📱📱📱
💰Submeta FOR FREE
🌈UFC Picks
👑MasterClass
✈️@bjjfanaticsinstructionals
#NicholasMeregali#Bundle#Gi#NewWave
💁♀️Buy
💁♀️
🔥NEW RELEASE🔥
😁Mount by Nicholas Meregali😁
➡️Master the mount with 6 hours of detailed instruction, starting with the four key stages: High Posture, Low Posture, High Mount, and Low Mount, to strategically adjust decision-making and stability.
➡️Explore Clips (strategic grips) and Head Position as anchors to maintain a firm base, generate constant pressure, and open safe pathways for transitions and submissions.
$197😍$19.99😍
❗️Channel Info and FAQ (MUST CHECK BEFORE BUY)❗️
📱Payment: 📱📱📱
💰Submeta FOR FREE
🌈UFC Picks
👑MasterClass
✈️@bjjfanaticsinstructionals
#NicholasMeregali#NewWave#Gi#Mount
💁♀️Buy
💁♀️
🔥NEW RELEASE🔥
😁Lasso Guard by Nicholas Meregali😁
➡️With approximately 35 instructional videos, this course delivers a complete systematization of the Lasso Guard, one of the most strategic and adaptable guards in Jiu-Jitsu.
➡️Nicholas Meregali presents a highly organized structure that divides the entire guard into key components, making learning clear and progression natural.
$197😍$19.99😍
❗️Channel Info and FAQ (MUST CHECK BEFORE BUY)❗️
📱Payment: 📱📱📱
💰Submeta FOR FREE
🌈UFC Picks
👑MasterClass
✈️@bjjfanaticsinstructionals
#NicholasMeregali#NewWave#Gi#LassoGuard
💁♀️Buy
💁♀️
🔥NEW RELEASE🔥
😁Deep De La Riva X by Nicholas Meregali😁
➡️Deep De La Riva X is a simple and structured guard system developed by Nicholas Meregali, shaped through years of high-pressure experience against world-class opponents at the highest levels of competition.
➡️This course was designed to help you develop a bottom game that’s easy to learn, reliable under pressure, and flexible enough to adapt to any personal style. Whether you’re building your guard from scratch or refining an existing system, Deep De La Riva X will give you the tools to create a connected, repeatable, and intelligent game.
$197😍$19.99😍
❗️Channel Info and FAQ (MUST CHECK BEFORE BUY)❗️
📱Payment: 📱📱📱
💰Submeta FOR FREE
🌈UFC Picks
👑MasterClass
✈️@bjjfanaticsinstructionals
#NicholasMeregali#NewWave#Gi#DeepDeLaRiva
💁♀️Buy
💁♀️
🔥CYBER MONDAY🔥
😍DEAL NO LONGER AVAILABLE😍
Congrats for everyone who redeemed 👨💻 turn notifications ON to stay tuned with future promos.
#NicholasMeregali#GianniGrippo#TainanDalpra
💁♀️Redeem
💁♀️