{"id":102603,"date":"2021-12-13T21:36:40","date_gmt":"2021-12-13T19:36:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kataloge-python-paketov-pypi-vyyavleny-tri-vredonosnye-biblioteki"},"modified":"2021-12-13T21:36:40","modified_gmt":"2021-12-13T19:36:41","slug":"v-kataloge-python-paketov-pypi-vyyavleny-tri-vredonosnye-biblioteki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/v-kataloge-python-paketov-pypi-vyyavleny-tri-vredonosnye-biblioteki","title":{"rendered":"T\u00eb tre bibliotekat e d\u00ebmshme u identifikuan n\u00eb katalogun e paketave Python PyPI","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb katalogun PyPI (Python Package Index) jan\u00eb identifikuar tre biblioteka q\u00eb p\u00ebrmbajn\u00eb kod t\u00eb d\u00ebmsh\u00ebm. Deri n\u00eb identifikimin e problemeve dhe heqjen nga katalogu, paketat arrit\u00ebn t\u00eb shkarkohen gati 15 mij\u00eb her\u00eb. <\/p>\n

Paketa dpp-client (10194 shkarkime) dhe dpp-client1234 (1536 shkarkime) jan\u00eb shp\u00ebrndar\u00eb q\u00eb nga shkurt dhe p\u00ebrfshin kodin p\u00ebr d\u00ebrgimin e p\u00ebrmbajtjes s\u00eb variablave t\u00eb ambientit, t\u00eb cilat, p\u00ebr shembull, mund t\u00eb p\u00ebrfshinin \u00e7el\u00ebsa akses, tokene ose fjal\u00ebkalime p\u00ebr sisteme t\u00eb integrimit t\u00eb vazhduesh\u00ebm ose ambienteve cloud, si AWS. Paketat gjithashtu d\u00ebrgojn\u00eb n\u00eb nj\u00eb host t\u00eb jasht\u00ebm nj\u00eb list\u00eb me p\u00ebrmbajtjen e katalog\u00ebve \u00ab\/home\u00bb, \u00ab\/mnt\/mesos\/\u00bb dhe \u00abmnt\/mesos\/sandbox\u201d.

\"T\u00eb<\/center> <\/p>\n

Paketa aws-login0tool (3042 shkarkime) u vendos n\u00eb depozitat PyPI m\u00eb 1 dhjetor dhe p\u00ebrfshinte kodin p\u00ebr t\u00eb shkarkuar dhe nisur nj\u00eb aplikacion trojan p\u00ebr t\u00eb kapur kontrollin e hosteve q\u00eb funksionojn\u00eb n\u00ebn Windows. Gjat\u00eb zgjedhjes s\u00eb emrit t\u00eb paket\u00ebs, \u00ebsht\u00eb marr\u00eb parasysh q\u00eb \u00e7el\u00ebsat \u00ab0\u00bb dhe \u00ab-\u00bb jan\u00eb af\u00ebr nj\u00ebri-tjetrit dhe ka mund\u00ebsi q\u00eb zhvilluesi do t\u00eb shkruaj\u00eb \u00abaws-login0tool\u00bb n\u00eb vend t\u00eb \u00abaws-login-tool\u00bb

\"T\u00eb<\/center> <\/p>\n

Paketat problematike u identifikuan n\u00ebp\u00ebrmjet nj\u00eb eksperimentimi t\u00eb thjesht\u00eb, n\u00eb t\u00eb cilin duke p\u00ebrdorur utilitarin Bandersnatch u shkarkuan disa paketa PyPI (rreth 200 mij\u00eb nga 330 mij\u00eb paketa n\u00eb depo), pas s\u00eb cil\u00ebs me utilitarin grep u p\u00ebrzgjodh\u00ebn dhe u analizuan paketat e cila n\u00eb skedarin setup.py p\u00ebrmendnin thirrjen \u00abimport urllib.request\u00bb, e cila zakonisht p\u00ebrdoret p\u00ebr t\u00eb d\u00ebrguar k\u00ebrkesa n\u00eb hoste t\u00eb jasht\u00ebm.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 PyPI (Python Package Index) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u0414\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0432 \u0441\u0443\u043c\u043c\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0441\u043f\u0435\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u043e\u0447\u0442\u0438 15 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437. \u041f\u0430\u043a\u0435\u0442\u044b dpp-client (10194 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438) \u0438 dpp-client1234 (1536 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a) \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u043a\u043e\u0434 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0433\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0442\u043e\u043a\u0435\u043d\u044b \u0438\u043b\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":102604,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102603","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47N\u00eb katalogun e pakove t\u00eb Pythonit PyPI jan\u00eb identifikuar tre biblioteka t\u00eb d\u00ebmshme | ProHoster","description":"\u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 PyPI (Python Package Index) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u0414\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0432 \u0441\u0443\u043c\u043c\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0441\u043f\u0435\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u043e\u0447\u0442\u0438 15 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-kataloge-python-paketov-pypi-vyyavleny-tri-vredonosnye-biblioteki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 | ProHoster","og:description":"\u0412 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 PyPI (Python Package Index) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u0414\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0432 \u0441\u0443\u043c\u043c\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0441\u043f\u0435\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u043e\u0447\u0442\u0438 15 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-kataloge-python-paketov-pypi-vyyavleny-tri-vredonosnye-biblioteki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-13T19:36:41+00:00","article:modified_time":"2021-12-13T19:36:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102603","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-13 19:36:54","updated":"2022-09-28 10:51:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102603","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=102603"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102603\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/102604"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=102603"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=102603"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=102603"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}