{"id":111737,"date":"2023-11-24T21:10:15","date_gmt":"2023-11-24T19:10:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-repozitorii-pypi-vyyavleno-okolo-5000-ostavlennyh-v-kode-sekretov-i-8-vredonosnyh-obfuskatorov"},"modified":"2023-11-24T21:10:15","modified_gmt":"2023-11-24T19:10:15","slug":"v-repozitorii-pypi-vyyavleno-okolo-5000-ostavlennyh-v-kode-sekretov-i-8-vredonosnyh-obfuskatorov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-repozitorii-pypi-vyyavleno-okolo-5000-ostavlennyh-v-kode-sekretov-i-8-vredonosnyh-obfuskatorov","title":{"rendered":"N\u00eb repositorin PyPI jan\u00eb zbuluar rreth 5000 sekrete t\u00eb braktisura n\u00eb kod dhe 8 obfuskator\u00eb keqdash\u00ebs","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Hulumtuesit e GitGuardian publikuan rezultatet e nj\u00eb analize mbi t\u00eb dh\u00ebnat e ndjeshme t\u00eb harruara nga zhvilluesit n\u00eb kodin e publikuar n\u00eb depot e paketave Python n\u00eb PyPI (Python Package Index). Pas shqyrtimit t\u00eb mbi 9.5 milion dosjeve dhe 5 milion l\u00ebshimeve t\u00eb pakove, t\u00eb lidhura me 450 mij\u00eb projekte, u identifikuan 56866 raste t\u00eb rrjedhjes s\u00eb t\u00eb dh\u00ebnave t\u00eb ndjeshme. N\u00ebse merret parasysh vet\u00ebm t\u00eb dh\u00ebnat unike, pa dyfishime n\u00eb l\u00ebshime t\u00eb ndryshme, numri i rrjedhjeve t\u00eb identifikuara ishte 3938, nd\u00ebrsa numri i projekteve t\u00eb cilat kan\u00eb pasur t\u00eb pakt\u00ebn nj\u00eb rrjedhje ishte 2922.      <\/p>\n<p>N\u00eb total jan\u00eb identifikuar m\u00eb shum\u00eb se 150 lloje rrjedhjesh t\u00eb informacionit t\u00eb ndjesh\u00ebm, midis t\u00eb cilave fjal\u00ebkalimet e zakonshme, \u00e7el\u00ebsat e kriptografis\u00eb, token\u00ebt e aksesit n\u00eb sh\u00ebrbimet e cloud, sistemet e integrimit t\u00eb vazhduesh\u00ebm dhe API-t\u00eb. T\u00eb pakt\u00ebn 768 kredenciale mbet\u00ebn aktive n\u00eb momentin e zhvillimit t\u00eb hulumtimit. Si shembuj t\u00eb njohur t\u00eb rrjedhjeve q\u00eb ruajn\u00eb r\u00ebnd\u00ebsin\u00eb, p\u00ebrmenden \u00e7el\u00ebsat e aksesit n\u00eb Azure Active Directory, kredencialet p\u00ebr SSH, MongoDB, MySQL dhe PostgreSQL, \u00e7el\u00ebsat p\u00ebr aplikacionet GitHub OAuth, Dropbox dhe Auth0, parametrat e hyrjes n\u00eb Coinbase dhe Twilio.      <\/p>\n<p>Midis llojeve n\u00eb rritje t\u00eb rrjedhjeve, p\u00ebrmenden tokenat p\u00ebr qasje n\u00eb bota n\u00eb Telegram, numri i t\u00eb cil\u00ebve u dyfishua n\u00eb fillim t\u00eb vitit 2021 dhe pastaj u dyfishua p\u00ebrs\u00ebri n\u00eb pranver\u00ebn e vitit 2023. Nj\u00eb rritje e vazhdueshme e rrjedhjeve \u00ebsht\u00eb gjithashtu e regjistruar q\u00eb nga viti 2020 p\u00ebr \u00e7el\u00ebsat e aksesit n\u00eb Google API, nd\u00ebrsa q\u00eb nga viti 2022 p\u00ebr kredencialet e DBMS. Nga paketat q\u00eb udh\u00ebheqin n\u00eb numrin e rrjedhjeve p\u00ebrmenden paketat chatllm dhe safire, n\u00eb t\u00eb cilat jan\u00eb harruar 209 \u00e7el\u00ebsat p\u00ebr OpenAI dhe 320 \u00e7el\u00ebsat p\u00ebr Google Cloud.        <\/p>\n<p>Mes llojeve t\u00eb dosjeve, ku \u00ebsht\u00eb identifikuar numri m\u00eb i madh i rrjedhjeve, p\u00ebrve\u00e7 dosjeve me zgjerimin \".py\", p\u00ebrmenden dosjet me zgjerim .json (610 rrjedhje), .md (270), PKG-INFO (240), METADATA (210), .txt (170), si dhe dosjet README (209) dhe dosjet nga katalog\u00ebt me emrin test (675). Shum\u00eb rrjedhje gjithashtu lidhen me neglizhenc\u00ebn dhe gabimet me konfigurimin e p\u00ebrjashtimeve t\u00eb dosjeve gjat\u00eb formimit t\u00eb pakove. P\u00ebr shembull, dosjet me dosjet lokale t\u00eb konfigurimit (.cookiecutterrc, .env, .pypirc etj.) mund t\u00eb p\u00ebrjashtohen nga depo Git p\u00ebrmes dosjes \".gitignore\", e cila nuk merret parasysh gjat\u00eb krijimit t\u00eb paket\u00ebs. N\u00eb ve\u00e7anti, n\u00eb depo u gjet\u00ebn 43 dosje .pypirc, t\u00eb cilat p\u00ebrmbanin kredenciale p\u00ebr qasje n\u00eb PyPI. N\u00eb 15 raste t\u00eb rrjedhjes, zhvilluesit nuk kishin planifikuar q\u00eb t\u00eb vendosnin publikisht paketat, fillimisht t\u00eb krijuara p\u00ebr p\u00ebrdorim t\u00eb brendsh\u00ebm, por i publikuan ato n\u00eb PyPI gabimisht.    <\/p>\n<p>Shtes\u00eb mund t\u00eb p\u00ebrmenden edhe dy ngjarje t\u00eb tjera lidhur me PyPI:  <\/p>\n<ul>\n<li class=\"l\"> N\u00eb depot e PyPI jan\u00eb identifikuar 8 paketa t\u00eb d\u00ebmshme, t\u00eb paraqitura si utilitar p\u00ebr obfuscation, dometh\u00ebn\u00eb, p\u00ebr ta b\u00ebr\u00eb kodin t\u00eb pap\u00ebrshkruesh\u00ebm, duke e v\u00ebshtir\u00ebsuar rikonstruktimin e algoritmit t\u00eb funksionimit. Paketat e identifikuara p\u00ebrmbanin n\u00eb emrat e tyre stringun \"pyobf\" (Pyobftoexe, Pyobfusfile, Pyobfexecute, Pyobfpremium, Pyobflight, Pyobfadvance, Pyobfuse dhe pyobfgood) dhe jan\u00eb shkarkuar m\u00eb shum\u00eb se 2000 her\u00eb.\n<p>Kodi malinj i integruar n\u00eb paketat ishte specifik p\u00ebr platform\u00ebn Windows dhe lejonte lidhjen me nj\u00eb menaxher t\u00eb jasht\u00ebm. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-shicago\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2914\">server<\/a>, ekzekutimin e komandove t\u00eb rastit n\u00eb kompjuterin e zhvilluesit, gjetjen dhe d\u00ebrgimin n\u00eb nj\u00eb server t\u00eb jasht\u00ebm t\u00eb informacionit t\u00eb ndjesh\u00ebm, si\u00e7 jan\u00eb \u00e7el\u00ebsat e aksesit, si dhe transferimin e skedar\u00ebve t\u00eb rastit nga sistemi. P\u00ebr m\u00eb tep\u00ebr, kodi malinj mund t\u00eb kryente funksione t\u00eb keylogger, duke kapur fjal\u00ebkalimet e shkruara n\u00eb Chrome, duke krijuar screenshot-e, regjistruar z\u00eb dhe madje menaxhuar web-kamer\u00ebn.          <\/p>\n<li class=\"l\"> Jan\u00eb publikuar rezultatet e nj\u00eb auditi t\u00eb pavarur t\u00eb baz\u00ebs s\u00eb kodit t\u00eb mjeteve, t\u00eb p\u00ebrdorura p\u00ebr organizimin e pun\u00ebs s\u00eb depot pypi.org, dhe t\u00eb korniz\u00ebs \"cabotage\", t\u00eb angazhuar n\u00eb infrastruktur\u00ebn p\u00ebr orkestrimin e kontejner\u00ebve. Auditi \u00ebsht\u00eb zhvilluar me mb\u00ebshtetje t\u00eb organizat\u00ebs jo fitimprur\u00ebse OTF (Open Technology Fund). Gjat\u00eb auditit nuk jan\u00eb identifikuar probleme me nivel t\u00eb lart\u00eb rreziku, dhe kodet burimore jan\u00eb pranuar si n\u00eb p\u00ebrputhje me k\u00ebrkesat kryesore p\u00ebr shkruajtjen e sigurt t\u00eb kodit. Megjithat\u00eb, \u00ebsht\u00eb v\u00ebn\u00eb re se mbulimi me teste i baz\u00ebs s\u00eb kodit cabotage \u00ebsht\u00eb i pamjaftuesh\u00ebm dhe jan\u00eb identifikuar 29 probleme, nga t\u00eb cilat tet\u00eb jan\u00eb caktuar nj\u00eb nivel t\u00eb moderuar rreziku, 6 t\u00eb ul\u00ebt dhe 14 jan\u00eb sh\u00ebnuar si v\u00ebrejtje informative.\n<p>Problemet m\u00eb t\u00eb dukshme:  <\/p>\n<ul>\n<li class=\"l\"> Kontrolli i pamjaftuesh\u00ebm i n\u00ebnshkrimeve digjitale t\u00eb p\u00ebrdorura p\u00ebr integrimin e PyPI me AWS SNS, duke lejuar d\u00ebrgimin e njoftimeve n\u00eb email t\u00eb p\u00ebrdoruesve t\u00eb ve\u00e7ant\u00eb.\n<li class=\"l\"> Shkaktimi i rrjedhjeve t\u00eb informacionit n\u00eb menaxherin e ngarkesave, duke i lejuar t\u00eb p\u00ebrcaktohet ekzistenca e nj\u00eb llogarie pa gjenerimin e ngjarjeve p\u00ebr p\u00ebrpjekjet e login.\n<li class=\"l\"> P\u00ebrdorimi i hash-eve kriptografike t\u00eb pasigurta, t\u00eb cilat nuk p\u00ebrjashtojn\u00eb sulmet p\u00ebr ndotjen e cache-it.\n<li class=\"l\"> N\u00ebse ka t\u00eb drejtat p\u00ebr t\u00eb nisur procese nd\u00ebrtimi p\u00ebrmes cabotage, sulmuesi potencialisht mund t\u00eb arrij\u00eb t\u00eb z\u00ebvend\u00ebsoj\u00eb komandat e tij.\n<li class=\"l\"> N\u00ebse ka t\u00eb drejtat e shp\u00ebrndarjes (deployment) n\u00eb cabotage, sulmuesi potencialisht mund t\u00eb shp\u00ebrndaj\u00eb nj\u00eb imazh q\u00eb duket legjitim.  <\/ul>\n<\/ul>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60169\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 GitGuardian \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0437\u0430\u0431\u044b\u0442\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u043e\u043c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index). \u041f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 9.5 \u043c\u043b\u043d \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 5 \u043c\u043b\u043d \u0440\u0435\u043b\u0438\u0437\u043e\u0432 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 450 \u0442\u044b\u0441\u044f\u0447\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 56866 \u0444\u0430\u043a\u0442\u043e\u0432 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0415\u0441\u043b\u0438 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0431\u0435\u0437 \u0434\u0443\u0431\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0440\u0435\u043b\u0438\u0437\u0430\u0445, \u0447\u0438\u0441\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0442\u0435\u0447\u0435\u043a [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-111737","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 GitGuardian \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0437\u0430\u0431\u044b\u0442\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u043e\u043c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index). \u041f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 9.5 \u043c\u043b\u043d \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 5 \u043c\u043b\u043d \u0440\u0435\u043b\u0438\u0437\u043e\u0432 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 450 \u0442\u044b\u0441\u044f\u0447\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 56866 \u0444\u0430\u043a\u0442\u043e\u0432 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0415\u0441\u043b\u0438 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0431\u0435\u0437 \u0434\u0443\u0431\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0440\u0435\u043b\u0438\u0437\u0430\u0445, \u0447\u0438\u0441\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0442\u0435\u0447\u0435\u043a\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-repozitorii-pypi-vyyavleno-okolo-5000-ostavlennyh-v-kode-sekretov-i-8-vredonosnyh-obfuskatorov\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 5000 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438 8 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0442\u043e\u0440\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 GitGuardian \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0437\u0430\u0431\u044b\u0442\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u043e\u043c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index). \u041f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 9.5 \u043c\u043b\u043d \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 5 \u043c\u043b\u043d \u0440\u0435\u043b\u0438\u0437\u043e\u0432 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 450 \u0442\u044b\u0441\u044f\u0447\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 56866 \u0444\u0430\u043a\u0442\u043e\u0432 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0415\u0441\u043b\u0438 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0431\u0435\u0437 \u0434\u0443\u0431\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0440\u0435\u043b\u0438\u0437\u0430\u0445, \u0447\u0438\u0441\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0442\u0435\u0447\u0435\u043a\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-repozitorii-pypi-vyyavleno-okolo-5000-ostavlennyh-v-kode-sekretov-i-8-vredonosnyh-obfuskatorov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-11-24T19:10:15+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-11-24T19:10:15+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47N\u00eb depozit\u00ebn PyPI jan\u00eb zbuluar rreth 5000 sekrete t\u00eb l\u00ebna n\u00eb kod dhe 8 obfuscator\u00eb t\u00eb d\u00ebmsh\u00ebm | ProHoster","description":"K\u00ebrkuesit e GitGuardian publikuan rezultatet e analiz\u00ebs mbi t\u00eb dh\u00ebnat e ndjeshme, t\u00eb harruara nga zhvilluesit n\u00eb kodin e vendosur n\u00eb depozit\u00ebn e pakove Python PyPI (Python Package Index). Pas studimit t\u00eb m\u00eb shum\u00eb se 9.5 milion skedar\u00ebve dhe 5 milion l\u00ebshimeve t\u00eb pakove, t\u00eb lidhura me 450 mij\u00eb projekte, u gjet\u00ebn 56866 raste t\u00eb rrjedhjes s\u00eb t\u00eb dh\u00ebnave t\u00eb ndjeshme. N\u00ebse merren parasysh vet\u00ebm t\u00eb dh\u00ebnat unike, pa dyfishime n\u00eb l\u00ebshime t\u00eb ndryshme, numri i rrjedhjeve t\u00eb identifikuara","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-repozitorii-pypi-vyyavleno-okolo-5000-ostavlennyh-v-kode-sekretov-i-8-vredonosnyh-obfuskatorov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 5000 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438 8 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0442\u043e\u0440\u043e\u0432 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 GitGuardian \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0437\u0430\u0431\u044b\u0442\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u043e\u043c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index). \u041f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 9.5 \u043c\u043b\u043d \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 5 \u043c\u043b\u043d \u0440\u0435\u043b\u0438\u0437\u043e\u0432 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 450 \u0442\u044b\u0441\u044f\u0447\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 56866 \u0444\u0430\u043a\u0442\u043e\u0432 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0415\u0441\u043b\u0438 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0431\u0435\u0437 \u0434\u0443\u0431\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0440\u0435\u043b\u0438\u0437\u0430\u0445, \u0447\u0438\u0441\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0442\u0435\u0447\u0435\u043a","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-repozitorii-pypi-vyyavleno-okolo-5000-ostavlennyh-v-kode-sekretov-i-8-vredonosnyh-obfuskatorov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-11-24T19:10:15+00:00","article:modified_time":"2023-11-24T19:10:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"111737","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:42:03","updated":"2026-02-09 21:42:03","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/111737","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=111737"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/111737\/revisions"}],"predecessor-version":[{"id":160194,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/111737\/revisions\/160194"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=111737"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=111737"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=111737"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}