Return to forum

Lagtrain · June 24, 2022 at 10:18 AM

So many libraries on many different platforms like npm and pypi are getting backdoored or typosquatted.

When will this ever stop, and are there ways of protecting yourself.

https://thehackernews.com/2022/06/multiple-backdoored-python-libraries.html

codmus · June 24, 2022 at 10:20 AM

Get backdoored nigga

Lagtrain · June 24, 2022 at 10:22 AM

(June 24, 2022, 10:20 AM)swedishfish Wrote: Get backdoored nigga

I never get backdoored, I always write everything myself.

codmus · June 24, 2022 at 10:24 AM

(June 24, 2022, 10:22 AM)Lagtrain Wrote:
(June 24, 2022, 10:20 AM)swedishfish Wrote: Get backdoored nigga

I never get backdoored, I always write everything myself.

no you don't

Lagtrain · June 24, 2022 at 10:25 AM

(June 24, 2022, 10:24 AM)swedishfish Wrote:
(June 24, 2022, 10:22 AM)Lagtrain Wrote:
(June 24, 2022, 10:20 AM)swedishfish Wrote: Get backdoored nigga

I never get backdoored, I always write everything myself.

no you don't

I don't but i never got backdoored.

babadook999 · June 26, 2022 at 9:10 AM

fucking pypi

sudoXploit · June 29, 2022 at 10:51 PM

How the fuck was npm backdoored?

Nvm, I see the link to the article now

sirname · June 29, 2022 at 11:46 PM

i feel like crackers will always exist to get around this sort of stuff. its a cat and mouse game. fix and then

theflash · July 10, 2022 at 3:04 AM

Agree, Its more lika a cat and mouse game

meli0das · July 10, 2022 at 7:14 AM

these package distributors didn't make it clear that the libraries on their platform are from third-party, nor does it have a trusted vendor verification or some shit like that.

newbie always install without having a second thought.

i always install the package inside a vm, check the source quickly before installing it on my main machine