{"id":114648,"date":"2024-03-29T12:25:50","date_gmt":"2024-03-29T10:25:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/pypi-priostanovil-registracziyu-novyh-polzovatelej-i-proektov-iz-za-vspleska-vredonosnyh-publikaczij"},"modified":"2024-03-29T12:25:50","modified_gmt":"2024-03-29T10:25:50","slug":"pypi-priostanovil-registracziyu-novyh-polzovatelej-i-proektov-iz-za-vspleska-vredonosnyh-publikaczij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/pypi-priostanovil-registracziyu-novyh-polzovatelej-i-proektov-iz-za-vspleska-vredonosnyh-publikaczij","title":{"rendered":"PyPI ndali regjistrimin e p\u00ebrdoruesve dhe projekteve t\u00eb reja p\u00ebr shkak t\u00eb nj\u00eb rritjeje t\u00eb publikimeve t\u00eb d\u00ebmshme","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Repoja e paketave Python PyPI (Python Package Index) ndaloi p\u00ebrkoh\u00ebsisht regjistrimin e p\u00ebrdoruesve t\u00eb rinj dhe krijimin e projekteve t\u00eb reja p\u00ebr shkak t\u00eb nj\u00eb sulmi t\u00eb automatizuar q\u00eb shkaktoi ngarkimin masiv t\u00eb pakove t\u00eb d\u00ebmshme. Bllokimi u vendos pas ngarkimit t\u00eb 566 pakove me kod t\u00eb d\u00ebmsh\u00ebm n\u00eb repo m\u00eb 26 dhe 27 mars, t\u00eb stilizuara si 16 biblioteka t\u00eb njohura Python. <\/p>\n

Emrat e pakove jan\u00eb formuar duke p\u00ebrdorur type-squatting, pra caktimi i emrave t\u00eb ngjash\u00ebm me dallime t\u00eb vogla, p\u00ebr shembull, temsorflow n\u00eb vend t\u00eb tensorflow, requyests n\u00eb vend t\u00eb requests, asyincio n\u00eb vend t\u00eb asyncio etj. Gjat\u00eb k\u00ebsaj lloj sulmi, agresor\u00ebt shpresojn\u00eb te p\u00ebrdoruesit e pand\u00ebrgjegjsh\u00ebm, q\u00eb b\u00ebjn\u00eb gabime shtypi ose nuk i v\u00ebrejn\u00eb ndryshimet n\u00eb em\u00ebr kur k\u00ebrkojn\u00eb ose ndjekin lidhje nga forumet dhe bisedat ku ata l\u00ebn\u00eb udh\u00ebzime t\u00eb rreme. <\/p>\n

Paketet e d\u00ebmshme jan\u00eb t\u00eb bazuara n\u00eb kodin e biblioteka legjitime, n\u00eb t\u00eb cilin jan\u00eb t\u00eb p\u00ebrfshira ndryshime t\u00eb ve\u00e7anta q\u00eb instalojn\u00eb n\u00eb sistem malware, i cili k\u00ebrkon dhe d\u00ebrgon t\u00eb dh\u00ebnat dhe skedar\u00ebt e ndjesh\u00ebm q\u00eb p\u00ebrmbajn\u00eb fjal\u00ebkalime, \u00e7el\u00ebsa aksesit, portofola kripto, toka dhe Cookie sesioni. Kodi i d\u00ebmsh\u00ebm futet n\u00eb skedarin setup.py, i cili ekzekutohet gjat\u00eb instalimit t\u00eb paket\u00ebs. Gjat\u00eb aktivizimit, ndryshimi i futur shkarkon komponent\u00ebt kryesor\u00eb t\u00eb malware nga jasht\u00eb. server<\/a>. <\/p>\n

N\u00eb dy dit\u00eb, haker\u00ebt ngarkuan 29 variante t\u00eb d\u00ebmshme t\u00eb paket\u00ebs tensorflow, 26 \u2014 BeautifulSoup, 26 \u2014 PyGame, 15 \u2014 SimpleJson, 38 \u2014 Matplotlib, 26 \u2014 PyTorch, 67 \u2014 CustomTKInter, 28 \u2014 selenium, 17 \u2014 playwright, 15 \u2014 asyncio dhe 67 \u2014 requirements. Gjithashtu, u identifikuan disa raste t\u00eb falsifikimit t\u00eb librarive requests, py-cord, colorama, capmonstercloudclient, pillow dhe bip-utils. <\/p>\n

Ve\u00e7an\u00ebrisht, v\u00ebmendje i kushtohet sulmit ndaj komunitetit Top.gg, me 170 mij\u00eb p\u00ebrdorues. Gjat\u00eb sulmit, sulmuesi arriti t\u00eb komprometoj\u00eb llogarin\u00eb n\u00eb GitHub t\u00eb nj\u00ebrit prej zhvilluesve t\u00eb top.gg, p\u00ebrmes vjedhjes s\u00eb Cookie-ve t\u00eb shfletuesit. Sulmuesi gjithashtu shtoi tre paketa n\u00eb depozitat PyPI dhe regjistroi. \u0434\u043e\u043c\u0435\u043d\u044b<\/a> pypihosted.org dhe pythanhosted.org, ku \u00ebsht\u00eb organizuar nj\u00eb pasqyr\u00eb p\u00ebr shp\u00ebrndarjen e var\u00ebsis\u00eb s\u00eb d\u00ebmshme n\u00eb paketat. <\/p>\n

P\u00ebrmes nj\u00eb llogarie t\u00eb hackuar n\u00eb GitHub-repozitorin e projektit top.gg, ku ishte vendosur lidhja Python mbi API Top.gg, u b\u00eb nj\u00eb ndryshim q\u00eb shtoi skedarin requirements.txt. N\u00eb k\u00ebt\u00eb skedar ishte lista e var\u00ebsive t\u00eb ngarkueshme, n\u00eb t\u00eb cilin n\u00ebn pre tekstin e var\u00ebsis\u00eb u vendos nj\u00eb lidhje p\u00ebr nj\u00eb klon t\u00eb d\u00ebmsh\u00ebm t\u00eb paket\u00ebs \u201ccolorama\u201d, e cila ishte vendosur n\u00eb nj\u00eb domain t\u00eb rrem\u00eb pypihosted.org, me shpres\u00ebn q\u00eb zhvilluesit nuk do ta vinin re ndryshimin nga domeni legjitim pythonhosted.org, nga i cili zakonisht ngarkohen paketat nga PyPI.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0440\u0435\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438. \u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0431\u044b\u043b\u0430 \u0432\u0432\u0435\u0434\u0435\u043d\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a 26 \u0438 27 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0431\u044b\u043b\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043e 566 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0441\u0442\u0438\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0434 16 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 Python-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a. \u0418\u043c\u0435\u043d\u0430 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0438\u043d\u0433\u0430, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114648","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47PyPI ka pezulluar regjistrimin e p\u00ebrdoruesve dhe projekteve t\u00eb reja p\u00ebr shkak t\u00eb nj\u00eb rritjeje t\u00eb publikimeve t\u00eb d\u00ebmshme | ProHoster","description":"Depoja e pakove Python PyPI (Python Package Index) ka ndaluar p\u00ebrkoh\u00ebsisht regjistrimin e p\u00ebrdoruesve t\u00eb rinj dhe krijimin e projekteve t\u00eb reja p\u00ebr shkak t\u00eb ngarkesave masive t\u00eb vazhdueshme t\u00eb pakove t\u00eb d\u00ebmshme n\u00eb nj\u00eb sulm automatizuar. Bllokimi u vendos pasi m\u00eb 26 dhe 27 mars n\u00eb depo u ngarkuan 566 paketa me kod t\u00eb d\u00ebmsh\u00ebm, q\u00eb ishin stilizuar si 16 bibliotekat m\u00eb t\u00eb njohura Python. Emrat e pakove jan\u00eb formuar duke p\u00ebrdorur tipqotimin.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/pypi-priostanovil-registracziyu-novyh-polzovatelej-i-proektov-iz-za-vspleska-vredonosnyh-publikaczij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47PyPI \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0438\u0437-\u0437\u0430 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0439 | ProHoster","og:description":"\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0440\u0435\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438. \u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0431\u044b\u043b\u0430 \u0432\u0432\u0435\u0434\u0435\u043d\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a 26 \u0438 27 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0431\u044b\u043b\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043e 566 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0441\u0442\u0438\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0434 16 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 Python-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a. \u0418\u043c\u0435\u043d\u0430 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0438\u043d\u0433\u0430,","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/pypi-priostanovil-registracziyu-novyh-polzovatelej-i-proektov-iz-za-vspleska-vredonosnyh-publikaczij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-29T10:25:50+00:00","article:modified_time":"2024-03-29T10:25:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114648","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-22 15:29:45","updated":"2026-03-05 11:10:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114648","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=114648"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114648\/revisions"}],"predecessor-version":[{"id":163163,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114648\/revisions\/163163"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=114648"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=114648"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=114648"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}