{"id":108646,"date":"2023-05-21T12:49:04","date_gmt":"2023-05-21T10:49:04","guid":{"rendered":"https:\/\/prohoster.info\/?p=108646"},"modified":"2023-05-22T10:28:56","modified_gmt":"2023-05-22T08:28:56","slug":"pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","title":{"rendered":"PyPI wstrzyma\u0142 rejestracj\u0119 nowych u\u017cytkownik\u00f3w i projekt\u00f3w z powodu z\u0142o\u015bliwej aktywno\u015bci.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Repozytorium pakiet\u00f3w Pythona PyPI (Python Package Index) tymczasowo wstrzyma\u0142o rejestracj\u0119 nowych u\u017cytkownik\u00f3w i projekt\u00f3w. Powodem jest wzrost aktywno\u015bci cyberprzest\u0119pc\u00f3w, kt\u00f3rzy publikuj\u0105 pakiety z z\u0142o\u015bliwym kodem. Zauwa\u017cono, \u017ce w zwi\u0105zku z urlopem kilku administrator\u00f3w, w ubieg\u0142ym tygodniu liczba zarejestrowanych z\u0142o\u015bliwych projekt\u00f3w przekroczy\u0142a mo\u017cliwo\u015bci pozosta\u0142ego zespo\u0142u PyPI w szybkim reagowaniu. Programi\u015bci planuj\u0105 w ci\u0105gu weekendu przebudowa\u0107 niekt\u00f3re procesy weryfikacji, a nast\u0119pnie wznowi\u0107 mo\u017cliwo\u015b\u0107 rejestracji w repozytorium. <\/p>\n

Z danych systemu monitorowania z\u0142o\u015bliwej aktywno\u015bci firmy Sonatype wynika, \u017ce w marcu 2023 r. w katalogu PyPI znaleziono 6933 z\u0142o\u015bliwych pakiet\u00f3w, a \u0142\u0105czna liczba wykrytych z\u0142o\u015bliwych pakiet\u00f3w od 2019 roku przekroczy\u0142a 115 tysi\u0119cy. W grudniu 2022 roku, w wyniku ataku na katalogi NuGet, NPM i PyPI, zarejestrowano publikacj\u0119 144 tysi\u0119cy pakiet\u00f3w z kodem do phishingu i spamu. <\/p>\n

Wi\u0119kszo\u015b\u0107 z\u0142o\u015bliwych pakiet\u00f3w przebiera si\u0119 za popularne biblioteki, wykorzystuj\u0105c type squatting (nadawanie podobnych nazw r\u00f3\u017cni\u0105cych si\u0119 poszczeg\u00f3lnymi znakami, na przyk\u0142ad exampl zamiast example, djangoo zamiast django, pyhton zamiast python itd.) \u2014 przest\u0119pcy licz\u0105 na niedba\u0142ych u\u017cytkownik\u00f3w, kt\u00f3rzy pope\u0142niaj\u0105 liter\u00f3wki lub nie zauwa\u017caj\u0105 r\u00f3\u017cnic w nazwie podczas wyszukiwania. Z\u0142o\u015bliwe dzia\u0142ania zwykle zwi\u0105zane s\u0105 z wysy\u0142aniem poufnych danych zdobytych na lokalnym systemie w wyniku identyfikacji typowych plik\u00f3w z has\u0142ami, kluczami dost\u0119pu, portfelami kryptograficznymi, tokenami, sesyjnymi plikami Cookie oraz innymi wra\u017cliwymi informacjami.
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u0447\u0438\u043d\u044b \u0443\u043a\u0430\u0437\u0430\u043d \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043d\u0430\u043b\u0430\u0434\u0438\u0432\u0448\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043f\u0443\u0441\u043a\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043e\u0431\u044a\u0451\u043c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0435\u0439\u0441\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b PyPI \u043f\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0441\u0442\u0440\u043e\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108646","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47PyPI z powodu z\u0142o\u015bliwej aktywno\u015bci wstrzyma\u0142 rejestracj\u0119 nowych u\u017cytkownik\u00f3w i projekt\u00f3w | ProHoster","description":"Repozytorium pakiet\u00f3w Pythona PyPI (Python Package Index) tymczasowo wstrzyma\u0142o rejestracj\u0119 nowych u\u017cytkownik\u00f3w i projekt\u00f3w.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47PyPI \u0438\u0437-\u0437\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster","og:description":"\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-05-21T10:49:04+00:00","article:modified_time":"2023-05-22T08:28:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/108646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=108646"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/108646\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=108646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=108646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=108646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}