{"id":108646,"date":"2023-05-21T12:49:04","date_gmt":"2023-05-21T10:49:04","guid":{"rendered":"https:\/\/prohoster.info\/?p=108646"},"modified":"2023-05-22T10:28:56","modified_gmt":"2023-05-22T08:28:56","slug":"pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","title":{"rendered":"PyPI a suspendat \u00eenregistrarea de noi utilizatori \u0219i proiecte din cauza activit\u0103\u021bii mali\u021bioase","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Repository-ul de pachete Python PyPI (Python Package Index) a suspendat temporar \u00eenregistrarea de noi utilizatori \u0219i proiecte. Motivul invocat este cre\u0219terea activit\u0103\u021bii infractorilor, care au \u00eenceput s\u0103 publice pachete cu cod mali\u021bios. Se remarc\u0103 faptul c\u0103, av\u00e2nd \u00een vedere c\u0103 mai mul\u021bi administratori sunt \u00een concediu, s\u0103pt\u0103m\u00e2na trecut\u0103 volumul proiectelor mali\u021bioase \u00eenregistrate a dep\u0103\u0219it capacitatea echipei r\u0103mase de a reac\u021biona rapid. Dezvoltatorii planific\u0103 s\u0103 restructureze unele procese de verificare \u00een weekend, dup\u0103 care vor relua posibilitatea de \u00eenregistrare \u00een repository. <\/p>\n

Potrivit sistemului de monitorizare a activit\u0103\u021bii mali\u021bioase de la compania Sonatype, \u00een martie 2023 au fost g\u0103site 6933 de pachete mali\u021bioase \u00een catalogul PyPI, iar din 2019 num\u0103rul total al pachetelor mali\u021bioase dep\u0103\u0219e\u0219te 115 mii. \u00cen decembrie 2022, \u00een urma unui atac asupra catalogelor NuGet, NPM \u0219i PyPI, a fost \u00eenregistrat\u0103 publicarea a 144 de mii de pachete cu cod pentru phishing \u0219i spam. <\/p>\n

Cele mai multe pachete malware se mascheaz\u0103 sub biblioteci populare prin intermediul tipului de denumire similar (atribuit unor nume asem\u0103n\u0103toare, care se difer\u0103 prin caractere individuale, de exemplu, exampl \u00een loc de example, djangoo \u00een loc de django, pyhton \u00een loc de python etc.) \u2014 atacatorii se bazeaz\u0103 pe utilizatori neaten\u021bi, care au f\u0103cut o gre\u0219eal\u0103 de tastare sau care nu au observat diferen\u021bele \u00een denumire \u00een timpul c\u0103ut\u0103rii. Ac\u021biunile mali\u021bioase se limiteaz\u0103 de obicei la trimiterea datelor confiden\u021biale, g\u0103site pe sistemul local, ca rezultat al identific\u0103rii fi\u0219ierelor tipice cu parole, chei de acces, portofele criptate, token-uri, cookie-uri de sesiune \u0219i alte informa\u021bii confiden\u021biale.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u0447\u0438\u043d\u044b \u0443\u043a\u0430\u0437\u0430\u043d \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043d\u0430\u043b\u0430\u0434\u0438\u0432\u0448\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043f\u0443\u0441\u043a\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043e\u0431\u044a\u0451\u043c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0432\u0448\u0435\u0439\u0441\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b PyPI \u043f\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0441\u0442\u0440\u043e\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108646","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47PyPI a suspendat \u00eenregistrarea de noi utilizatori \u0219i proiecte din cauza activit\u0103\u021bii mali\u021bioase | ProHoster","description":"Repository-ul de pachete Python PyPI (Python Package Index) a suspendat temporar \u00eenregistrarea de noi utilizatori \u0219i proiecte.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47PyPI \u0438\u0437-\u0437\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster","og:description":"\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-05-21T10:49:04+00:00","article:modified_time":"2023-05-22T08:28:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/108646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=108646"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/108646\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=108646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=108646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=108646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}