Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим.
С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов.
Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров.
PyPI new user and new project registrations temporarily suspended
Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки.
Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе.
Чтобы избежать подобных факапов я рекомендую:
▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров.
▫️ Используйте файл requirements.txt вместо ручной установки пакетов
▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации.
▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию.
▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости.
Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг.
#offtop
🤝$300 Spread the Word Contest — Create Content & Get Rewarded!
In anticipation of the start of Squad Games Season 2, the #Electra team is launching a creative competition for the community with a prize pool of $300 USDT!
You create content and get a chance to win a prize!
💸
✔️How to participate?
🟢 Make a post/video/image about Squad Games Season 2
🟢 Post it on one of the platforms with the hashtag #electra:
🌐Twitter (X)
🌐TikTok
🌎Instagram Reels
📺YouTube Shorts
🟢 Leave a link to your content in the comments below ➡️the original post by Electra
💵Awards:
300 USDT will be distributed among 5 authors of the most viral and creative works. Each winner will receive 60 USDT.
🗓Deadlines: up to and including May 26, hurry up!
🤑Electra is once again encouraging creativity and community — if you've been wanting to prove yourself, this is the perfect chance.
#Electra#SquadGames#Contest
🤝Squad Games Season 2 by Electra – MORE REWARDS, MORE ACTION!
After a successful first season, #Electra launches Squad Games Season 2 — this time with even higher stakes: more prizes, more bonuses, more winners, and more opportunities for active traders!
📅 Tournament Start: May 26
🕓 Duration: 2 weeks
💵Squad Rewards:
💲 Up to $100,000 USDT
🎁 Up to $100,000 in bonus vouchers
⚡️5,000,000 airdrop points
*Rewards will be distributed among the top 20 traders by volume in each of the top-6 squads.
💵Individual Rewards:
💲 $5,000 USDT will be shared among the top-20 traders with the highest PnL (in USDT) throughout the tournament.
💵 Daily Bonuses — $50 each*:
✅Best PnL of the day
✅Worst PnL of the day
✅Highest daily trading volume
*Rewards are issued as Electra bonus vouchers and will be distributed after the tournament ends.
🤑Just like in Season 1, all trading activity counts toward farming points for the upcoming $ELT airdrop!
So by participating in the tournament, you’re not only competing for real rewards, but also boosting your future $ELT airdrop share.
⚡️ Electra also teased $ELT tokenomics:
• TGE supply — 100,000,000 $ELT
• Up to 10% allocated to the community airdrop
• 5,000,000 $ELT were already distributed in Season 1
• Season 2 has a significantly larger allocation focused on active traders and volume!
📈Took part in the Storm Trade contest and liked the vibe?
Then Squad Games by Electra is your next-level challenge:
✅ Bigger rewards
✅ $ELT farming
✅ Real incentives for your trading activity
🤑 The tournament is live!Join our squad, farm points and claim your share of rewards!
❤️TON Events Squad🧪
#Electra#SquadGames#Season2#Airdrop
🤝Squad Games Season 2 by Electra – MORE REWARDS, MORE ACTION!
After a successful first season, #Electra launches Squad Games Season 2 — this time with even higher stakes: more prizes, more bonuses, more winners, and more opportunities for active traders!
📅 Tournament Start: May 26
🕓 Duration: 2 weeks
💵Squad Rewards:
💲 Up to $100,000 USDT
🎁 Up to $100,000 in bonus vouchers
⚡️5,000,000 airdrop points
*Rewards will be distributed among the top 20 traders by volume in each of the top-6 squads.
💵Individual Rewards:
💲 $5,000 USDT will be shared among the top-20 traders with the highest PnL (in USDT) throughout the tournament.
💵 Daily Bonuses — $50 each*:
✅Best PnL of the day
✅Worst PnL of the day
✅Highest daily trading volume
*Rewards are issued as Electra bonus vouchers and will be distributed after the tournament ends.
🤑Just like in Season 1, all trading activity counts toward farming points for the upcoming $ELT airdrop!
So by participating in the tournament, you’re not only competing for real rewards, but also boosting your future $ELT airdrop share.
⚡️ Electra also teased $ELT tokenomics:
• TGE supply — 100,000,000 $ELT
• Up to 10% allocated to the community airdrop
• 5,000,000 $ELT were already distributed in Season 1
• Season 2 has a significantly larger allocation focused on active traders and volume!
📈Took part in the Storm Trade contest and liked the vibe?
Then Squad Games by Electra is your next-level challenge:
✅ Bigger rewards
✅ $ELT farming
✅ Real incentives for your trading activity
🤑 The tournament is live!Join our squad, farm points and claim your share of rewards!
❤️TON Events Squad🧪
#Electra#SquadGames#Season2#Airdrop