{"id":108646,"date":"2023-05-21T12:49:04","date_gmt":"2023-05-21T10:49:04","guid":{"rendered":"https:\/\/prohoster.info\/?p=108646"},"modified":"2023-05-22T10:28:56","modified_gmt":"2023-05-22T08:28:56","slug":"pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","title":{"rendered":"PyPI a suspendu l'inscription de nouveaux utilisateurs et projets \u00e0 cause d'activit\u00e9s malveillantes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Le d\u00e9p\u00f4t de paquets Python PyPI (Python Package Index) a temporairement suspendu l'inscription de nouveaux utilisateurs et projets. La raison invoqu\u00e9e est une mont\u00e9e des activit\u00e9s malveillantes, o\u00f9 des attaquants ont commenc\u00e9 \u00e0 publier des paquets contenant du code malveillant. Il est not\u00e9 qu'en raison de l'absence de plusieurs administrateurs en cong\u00e9, le volume de projets malveillants enregistr\u00e9s la semaine derni\u00e8re a d\u00e9pass\u00e9 la capacit\u00e9 de l'\u00e9quipe restante de PyPI \u00e0 r\u00e9agir rapidement. Les d\u00e9veloppeurs pr\u00e9voient de r\u00e9organiser certains processus de v\u00e9rification ce week-end, apr\u00e8s quoi l'inscription au d\u00e9p\u00f4t sera \u00e0 nouveau possible. <\/p>\n

Selon le syst\u00e8me de surveillance des activit\u00e9s malveillantes de Sonatype, en mars 2023, le catalogue PyPI a trouv\u00e9 6933 paquets malveillants, et au total, depuis 2019, le nombre de paquets malveillants d\u00e9couverts a d\u00e9pass\u00e9 115 000. En d\u00e9cembre 2022, lors d'une attaque sur les catalogues NuGet, NPM et PyPI, 144 000 paquets contenant du code de phishing et de spam ont \u00e9t\u00e9 publi\u00e9s. <\/p>\n

La plupart des paquets malveillants se d\u00e9guisent en biblioth\u00e8ques populaires gr\u00e2ce au typosquatting (l'utilisation de noms similaires, diff\u00e9rant par quelques caract\u00e8res, par exemple, exampl au lieu de example, djangoo au lieu de django, pyhton au lieu de python, etc.) \u2014 les malfaiteurs comptent sur les utilisateurs distraits, qui font des erreurs typographiques ou ne remarquent pas les diff\u00e9rences dans le nom lors de leurs recherches. Les actions malveillantes se traduisent g\u00e9n\u00e9ralement par l'envoi de donn\u00e9es sensibles trouv\u00e9es sur le syst\u00e8me local suite \u00e0 l'identification de fichiers types contenant des mots de passe, des cl\u00e9s d'acc\u00e8s, des portefeuilles num\u00e9riques, des jetons, des cookies de session et d'autres informations confidentielles.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u0447\u0438\u043d\u044b \u0443\u043a\u0430\u0437\u0430\u043d \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043d\u0430\u043b\u0430\u0434\u0438\u0432\u0448\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043f\u0443\u0441\u043a\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043e\u0431\u044a\u0451\u043c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0435\u0439\u0441\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b PyPI \u043f\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0441\u0442\u0440\u043e\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108646","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47PyPI, en raison d'activit\u00e9s malveillantes, a suspendu l'inscription de nouveaux utilisateurs et projets | ProHoster","description":"Le d\u00e9p\u00f4t de paquets Python PyPI (Python Package Index) a temporairement suspendu l'inscription de nouveaux utilisateurs et projets.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47PyPI \u0438\u0437-\u0437\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster","og:description":"\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-05-21T10:49:04+00:00","article:modified_time":"2023-05-22T08:28:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/108646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=108646"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/108646\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=108646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=108646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=108646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}