Maraibhurari matatu ane kodhi yakaipa akaonekwa muPyPI (Python Package Index) dhairekitori. Matambudziko asati aonekwa uye kubviswa kubva kukhathalogi, mapakeji akange atorwa kanenge zviuru gumi neshanu.
Iyo dpp-client (10194 downloads) uye dpp-client1234 (1536 downloads) mapakeji akagoverwa kubva munaFebruary uye akabatanidza kodhi yekutumira zviri mukati mezvakasiyana siyana, izvo, semuenzaniso, zvinogona kusanganisira makiyi ekuwana, tokeni kana mapassword kune anoenderera ekubatanidza masisitimu. kana makore nharaunda seAWS. Iwo mapakeji akatumirawo rondedzero ine zviri mukati me "/ kumba", "/mnt/mesos/" uye "mnt/mesos/sandbox" madhairekitori kune wekunze muenzi.
Iyo aws-login0tool package (3042 downloads) yakatumirwa kuPyPI repository muna Zvita 1 uye yaisanganisira kodhi yekudhawunirodha uye kumhanya Trojan application yekutora kutonga kwemauto anomhanya Windows. Pakusarudza zita repasuru, kuverenga kwakaitwa nenyaya yekuti "0" uye "-" makiyi ari padyo uye pane mukana wekuti mugadziri achanyora "aws-login0tool" pachinzvimbo che "aws-login-tool".
Iwo mapakeji ane dambudziko akaonekwa panguva yekuedza kuri nyore, umo chikamu chemaPyPI mapakeji (angangoita zviuru mazana maviri kubva pamazana mazana matatu nemakumi matatu ezviuru zvepakeji mune repository) akatorwa pasi pachishandiswa Bandersnatch utility, mushure meizvozvo iyo grep utility yakaziva uye yakaongorora mapakeji aive. yakataurwa musetup.py faira Iyo "import urllib.request" call, inowanzo shandiswa kutumira zvikumbiro kune vekunze vanogamuchira.
Source: opennet.ru