{"id":108646,"date":"2023-05-21T12:49:04","date_gmt":"2023-05-21T10:49:04","guid":{"rendered":"https:\/\/prohoster.info\/?p=108646"},"modified":"2023-05-22T10:28:56","modified_gmt":"2023-05-22T08:28:56","slug":"pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","title":{"rendered":"PyPI kv\u016fli nebezpe\u010dn\u00e9 aktivit\u011b pozastavil registraci nov\u00fdch u\u017eivatel\u016f a projekt\u016f.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Repozit\u00e1\u0159 Python bal\u00ed\u010dk\u016f PyPI (Python Package Index) do\u010dasn\u011b zastavil registraci nov\u00fdch u\u017eivatel\u016f a projekt\u016f. Jako d\u016fvod byla uvedena vlna aktivity \u00fato\u010dn\u00edk\u016f, kte\u0159\u00ed se soust\u0159edili na publikaci bal\u00ed\u010dk\u016f s \u0161kodliv\u00fdm k\u00f3dem. Je zd\u016frazn\u011bno, \u017ee vzhledem k dovolen\u00e9 n\u011bkolika administr\u00e1tor\u016f minul\u00fd t\u00fdden objem registrovan\u00fdch \u0161kodliv\u00fdch projekt\u016f p\u0159ekro\u010dil mo\u017enosti zb\u00fdvaj\u00edc\u00edho t\u00fdmu PyPI pro rychlou reakci. V\u00fdvoj\u00e1\u0159i pl\u00e1nuj\u00ed o v\u00edkendu p\u0159estav\u011bt n\u011bkter\u00e9 procesy kontroly, po \u010dem\u017e obnov\u00ed mo\u017enost registrace v repozit\u00e1\u0159i. <\/p>\n

Podle syst\u00e9mu monitorov\u00e1n\u00ed \u0161kodliv\u00e9 aktivity od spole\u010dnosti Sonatype v b\u0159eznu 2023 bylo v katalogu PyPI nalezeno 6933 \u0161kodliv\u00fdch bal\u00ed\u010dk\u016f, a celkov\u011b od roku 2019 po\u010det odhalen\u00fdch \u0161kodliv\u00fdch bal\u00ed\u010dk\u016f p\u0159ekro\u010dil 115 tis\u00edc. V prosinci 2022 do\u0161lo v d\u016fsledku \u00fatoku na katalogy NuGet, NPM a PyPI k publikaci 144 tis\u00edc bal\u00ed\u010dk\u016f obsahuj\u00edc\u00edch k\u00f3d pro phishing a spam. <\/p>\n

V\u011bt\u0161ina \u0161kodliv\u00fdch bal\u00ed\u010dk\u016f se maskuje za popul\u00e1rn\u00ed knihovny pomoc\u00ed type squattingu (pou\u017eit\u00ed podobn\u00fdch n\u00e1zv\u016f, kter\u00e9 se li\u0161\u00ed jednotliv\u00fdmi znaky, nap\u0159\u00edklad exampl m\u00edsto example, djangoo m\u00edsto django, pyhton m\u00edsto python atd.) \u2014 \u00fato\u010dn\u00edci spol\u00e9haj\u00ed na nepozorn\u00e9 u\u017eivatele, kte\u0159\u00ed ud\u011blali p\u0159eklep nebo si nev\u0161imli rozd\u00edl\u016f v n\u00e1zvu p\u0159i hled\u00e1n\u00ed. \u0160kodliv\u00e9 \u010dinnosti obvykle spo\u010d\u00edvaj\u00ed v odes\u00edl\u00e1n\u00ed citliv\u00fdch \u00fadaj\u016f, nalezen\u00fdch na m\u00edstn\u00edm syst\u00e9mu v d\u016fsledku identifikace typov\u00fdch soubor\u016f s hesly, p\u0159\u00edstupov\u00fdmi kl\u00ed\u010di, kryptom\u011bnov\u00fdmi pen\u011b\u017eenkami, tokeny, relac\u00ed Cookie a dal\u0161\u00edmi citliv\u00fdmi informacemi.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u0447\u0438\u043d\u044b \u0443\u043a\u0430\u0437\u0430\u043d \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043d\u0430\u043b\u0430\u0434\u0438\u0432\u0448\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043f\u0443\u0441\u043a\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043e\u0431\u044a\u0451\u043c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0435\u0439\u0441\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b PyPI \u043f\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0441\u0442\u0440\u043e\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108646","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47PyPI kv\u016fli \u0161kodliv\u00e9 aktivit\u011b pozastavil registraci nov\u00fdch u\u017eivatel\u016f a projekt\u016f | ProHoster","description":"Repozit\u00e1\u0159 Python bal\u00ed\u010dk\u016f PyPI (Python Package Index) do\u010dasn\u011b pozastavil registraci nov\u00fdch u\u017eivatel\u016f a projekt\u016f.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47PyPI \u0438\u0437-\u0437\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster","og:description":"\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-05-21T10:49:04+00:00","article:modified_time":"2023-05-22T08:28:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/108646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=108646"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/108646\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=108646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=108646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=108646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}