{"id":108646,"date":"2023-05-21T12:49:04","date_gmt":"2023-05-21T10:49:04","guid":{"rendered":"https:\/\/prohoster.info\/?p=108646"},"modified":"2023-05-22T10:28:56","modified_gmt":"2023-05-22T08:28:56","slug":"pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/pypi-iz-za-vredonosnoj-aktivnosti-priostanovil-registracziyu-novyh-polzovatelej-i-proektov","title":{"rendered":"PyPI ka pezulluar regjistrimin e p\u00ebrdoruesve dhe projekteve t\u00eb reja p\u00ebr shkak t\u00eb aktivitetit t\u00eb d\u00ebmsh\u00ebm","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Depoja e pakove Python PyPI (Python Package Index) ka pezulluar p\u00ebrkoh\u00ebsisht regjistrimin e p\u00ebrdoruesve dhe projekteve t\u00eb reja. Arsyetimi p\u00ebr k\u00ebt\u00eb \u00ebsht\u00eb nj\u00eb shp\u00ebrthim aktiviteti nga haker\u00ebt q\u00eb kan\u00eb filluar publikimin e pakove me kod t\u00eb d\u00ebmsh\u00ebm. Raportohet se, duke marr\u00eb parasysh pushimin e disa administrator\u00ebve, gjat\u00eb jav\u00ebs s\u00eb kaluar, volumi i projekteve t\u00eb regjistruar me d\u00ebme ka tejkaluar kapacitetin e ekipit t\u00eb mbetur t\u00eb PyPI p\u00ebr t\u00eb reaguar shpejt. Zhvilluesit planifikojn\u00eb t\u00eb ristrukturojn\u00eb disa procese verifikimi gjat\u00eb fundjav\u00ebs, pasi t\u00eb rikthejn\u00eb mund\u00ebsin\u00eb e regjistrimit n\u00eb depo. <\/p>\n
Sipas sistemit t\u00eb monitorimit t\u00eb aktivitetit t\u00eb d\u00ebmsh\u00ebm nga kompania Sonatype, n\u00eb mars 2023, n\u00eb katalogun PyPI jan\u00eb gjetur 6933 paketa t\u00eb d\u00ebmshme, dhe q\u00eb nga viti 2019 numri total i paketimeve t\u00eb zbuluara me d\u00ebme ka tejkaluar 115 mij\u00eb. N\u00eb dhjetor 2022, si rezultat i nj\u00eb sulmi ndaj katalog\u00ebve NuGet, NPM dhe PyPI, \u00ebsht\u00eb raportuar publikimi i 144 mij\u00eb paketimeve me kod p\u00ebr phishing dhe spam. <\/p>\n
Shumica e pakot me malware mashtrohen si biblioteka t\u00eb njohura duke p\u00ebrdorur type-squatting (emra t\u00eb ngjash\u00ebm q\u00eb ndryshojn\u00eb nga disa simbole, p\u00ebr shembull, exampl n\u00eb vend t\u00eb example, djangoo n\u00eb vend t\u00eb django, pyhton n\u00eb vend t\u00eb python dhe t\u00eb tjera) \u2014 sulmuesit shpresojn\u00eb n\u00eb p\u00ebrdorues t\u00eb pakujdessh\u00ebm q\u00eb kan\u00eb b\u00ebr\u00eb nj\u00eb gabim n\u00eb shkrim ose nuk e kan\u00eb v\u00ebn\u00eb re ndryshimin n\u00eb em\u00ebr gjat\u00eb k\u00ebrkimit. Veprimet e d\u00ebmshme zakonisht lidhen me d\u00ebrgimin e t\u00eb dh\u00ebnave t\u00eb ndjeshme, t\u00eb zbuluara n\u00eb sistemin lokal si rezultat i identifikimit t\u00eb skedar\u00ebve tipik\u00eb me fjal\u00ebkalime, \u00e7el\u00ebsa akses, portofol\u00eb kriptografik\u00eb, tokena, cookie sesioni dhe informacione t\u00eb tjera t\u00eb ndjeshme. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"