Mune iyo PyPI (Python Package Index) catalog, akati wandei mapakeji akaonekwa anosanganisira kodhi yakavanzika cryptocurrency migodhi. Matambudziko aivepo mumapakeji maratlib, maratlib1, matplatlib-plus, mllearnlib, mplatlib uye kudzidzalib, mazita ayo akasarudzwa kuti afanane mukuperetera kumaraibhurari anozivikanwa (matplotlib) paine tarisiro yekuti mushandisi angakanganisa pakunyora uye. usacherechedza misiyano (typesquatting). Iwo mapakeji akatumirwa muna Kubvumbi pasi peakaundi nedog123 uye akatorwa kanenge zviuru zvishanu zvakazara mumwedzi miviri.
Iyo kodhi yakaipa yakaiswa muraibhurari yemaratlib, iyo yaishandiswa mune mamwe mapakeji nenzira yekutsamira. Kodhi yakashata yakavanzwa uchishandisa proprietary obfuscation mechanism, isina kuwanikwa neyakajairwa zvinoshandiswa, uye yakaitwa nekuita setup.py kuvaka script yakaitwa panguva yekuiswa kwepakeji. Kubva setup.py, yakatorwa kubva kuGitHub uye iyo bash script aza.sh yakatangwa, iyo yakabva yatora uye yakatanga iyo Ubqminer kana T-Rex cryptocurrency migodhi application.
Source: opennet.ru