{"id":114648,"date":"2024-03-29T12:25:50","date_gmt":"2024-03-29T10:25:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/pypi-priostanovil-registracziyu-novyh-polzovatelej-i-proektov-iz-za-vspleska-vredonosnyh-publikaczij"},"modified":"2024-03-29T12:25:50","modified_gmt":"2024-03-29T10:25:50","slug":"pypi-priostanovil-registracziyu-novyh-polzovatelej-i-proektov-iz-za-vspleska-vredonosnyh-publikaczij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/pypi-priostanovil-registracziyu-novyh-polzovatelej-i-proektov-iz-za-vspleska-vredonosnyh-publikaczij","title":{"rendered":"PyPI ka ndaluar regjistrimin e p\u00ebrdoruesve t\u00eb rinj dhe projekteve p\u00ebr shkak t\u00eb nj\u00eb shp\u00ebrthimi t\u00eb publikimeve t\u00eb d\u00ebmshme","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Repozitori i pakove Python, PyPI (Python Package Index), ndaloi p\u00ebrkoh\u00ebsisht regjistrimin e p\u00ebrdoruesve t\u00eb rinj dhe krijimin e projekteve t\u00eb reja p\u00ebr shkak t\u00eb ngarkimeve masive t\u00eb pakove t\u00eb d\u00ebmshme gjat\u00eb nj\u00eb sulmi automatizuar. Bllokimi u vendos pas ngarkimit t\u00eb 566 pakove me kod t\u00eb d\u00ebmsh\u00ebm n\u00eb repozitor, t\u00eb stilizuara si 16 biblioteka popullore Python, m\u00eb 26 dhe 27 mars. <\/p>\n

Emrat e pakove jan\u00eb formuar duke p\u00ebrdorur tipar t\u00eb quajtur 'typosquatting', q\u00eb do t\u00eb thot\u00eb caktimi i emrave t\u00eb ngjash\u00ebm t\u00eb ndryshuar me simbole t\u00eb ve\u00e7anta, p\u00ebr shembull, temsorflow n\u00eb vend t\u00eb tensorflow, requyests n\u00eb vend t\u00eb requests, asyincio n\u00eb vend t\u00eb asyncio dhe t\u00eb tjer\u00eb. Gjat\u00eb sulmeve t\u00eb tilla, sulmuesit shpresojn\u00eb t\u00eb shfryt\u00ebzojn\u00eb p\u00ebrdoruesit e pakujdessh\u00ebm q\u00eb b\u00ebjn\u00eb gabime gjat\u00eb shkrimit ose q\u00eb nuk e v\u00ebrejn\u00eb ndryshimin n\u00eb em\u00ebr kur k\u00ebrkojn\u00eb ose klikojn\u00eb n\u00eb lidhjet e l\u00ebna n\u00eb forume dhe biseda nga sulmuesit. <\/p>\n

Pakot e d\u00ebmshme jan\u00eb t\u00eb bazuara n\u00eb kodin e bibliotokave legjitime, n\u00eb t\u00eb cilat jan\u00eb inkorporuar ndryshime t\u00eb ve\u00e7anta q\u00eb vendosin n\u00eb sistem malware q\u00eb k\u00ebrkon dhe d\u00ebrgon t\u00eb dh\u00ebna konfidenciale dhe skedar\u00eb q\u00eb p\u00ebrmbajn\u00eb fjal\u00ebkalime, \u00e7el\u00ebsa akses, porte kripto, tokene dhe Cookie seancash. Kodi i d\u00ebmsh\u00ebm inkorporohet n\u00eb skedarin setup.py, i cili ekzekutohet gjat\u00eb instalimit t\u00eb paket\u00ebs. Gjat\u00eb aktivizimit, ndryshimi i b\u00ebr\u00eb realizon shkarkimin e p\u00ebrb\u00ebr\u00ebsve kryesor\u00eb t\u00eb d\u00ebmsh\u00ebm nga jasht\u00eb. server\u00eb<\/a>. <\/p>\n

N\u00eb dy dit\u00eb, haker\u00ebt ngarkuan 29 variante t\u00eb d\u00ebmshme t\u00eb paket\u00ebs tensorflow, 26 \u2014 BeautifulSoup, 26 \u2014 PyGame, 15 \u2014 SimpleJson, 38 \u2014 Matplotlib, 26 \u2014 PyTorch, 67 \u2014 CustomTKInter, 28 \u2014 selenium, 17 \u2014 playwright, 15 \u2014 asyncio dhe 67 \u2014 requirements. P\u00ebr m\u00eb tep\u00ebr, u gjet\u00ebn disa raste t\u00eb falsifikimit t\u00eb bibliotekave requests, py-cord, colorama, capmonstercloudclient, pillow dhe bip-utils. <\/p>\n

Ve\u00e7an\u00ebrisht theksohet sulmi ndaj komunitetit Top.gg, i cili ka 170,000 p\u00ebrdorues. Gjat\u00eb sulmit, sulmuesi arriti t\u00eb kompromentoj\u00eb llogarin\u00eb n\u00eb GitHub t\u00eb nj\u00eb zhvilluesi t\u00eb top.gg duke vjedhur Cookie t\u00eb shfletuesit. Sulmuesi gjithashtu shtoi tri paketa n\u00eb repozitorin PyPI dhe regjistroi domenet<\/a> pypihosted.org dhe pythanhosted.org, ku u organizua nj\u00eb pasqyr\u00eb p\u00ebr shp\u00ebrndarjen e var\u00ebsive t\u00eb d\u00ebmshme ndaj pakove. <\/p>\n

P\u00ebrmes nj\u00eb llogarie t\u00eb hackuar n\u00eb depo GitHub t\u00eb projektit top.gg, ku ishte vendosur lidhja Python mbi API Top.gg, u b\u00eb nj\u00eb ndryshim q\u00eb shtoi skedarin requirements.txt. N\u00eb k\u00ebt\u00eb skedar ishte lista e var\u00ebsive t\u00eb ngarkuara, n\u00eb t\u00eb cil\u00ebn n\u00ebn petkun e shkarkimit t\u00eb nj\u00eb var\u00ebsie nga nj\u00eb pasqyr\u00eb, ishte nj\u00eb lidhje p\u00ebr nj\u00eb klon t\u00eb d\u00ebmsh\u00ebm t\u00eb paket\u00ebs \u00abcolorama\u00bb, e vendosur n\u00eb nj\u00eb domen t\u00eb rrem\u00eb pypihosted.org, me shpres\u00ebn q\u00eb zhvilluesit nuk do t\u00eb vinin re ndryshimin nga domeni legjitim pythonhosted.org, nga ku zakonisht shkarkohen paketat nga PyPI.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0440\u0435\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438. \u0411\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0431\u044b\u043b\u0430 \u0432\u0432\u0435\u0434\u0435\u043d\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a 26 \u0438 27 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0431\u044b\u043b\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043e 566 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0441\u0442\u0438\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0434 16 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 Python-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a. \u0418\u043c\u0435\u043d\u0430 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0438\u043d\u0433\u0430, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114648","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47PyPI nd\u00ebrpreu regjistrimin e p\u00ebrdoruesve dhe projekteve t\u00eb reja p\u00ebr shkak t\u00eb nj\u00eb shp\u00ebrthimi t\u00eb publikimeve keqdash\u00ebse | ProHoster","description":"Depozita e paketave Python PyPI (Python Package Index) p\u00ebrkoh\u00ebsisht ndaloi regjistrimin e p\u00ebrdoruesve t\u00eb rinj dhe krijimin e projekteve t\u00eb reja p\u00ebr shkak t\u00eb ngarkimeve masive t\u00eb vazhdueshme t\u00eb paketimeve keqdash\u00ebse.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/pypi-priostanovil-registracziyu-novyh-polzovatelej-i-proektov-iz-za-vspleska-vredonosnyh-publikaczij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47PyPI \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0438\u0437-\u0437\u0430 \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0439 | ProHoster","og:description":"\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0440\u0435\u0442\u0438\u043b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0445\u043e\u0434\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/pypi-priostanovil-registracziyu-novyh-polzovatelej-i-proektov-iz-za-vspleska-vredonosnyh-publikaczij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-29T10:25:50+00:00","article:modified_time":"2024-03-29T10:25:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114648","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-22 15:29:45","updated":"2026-03-05 11:10:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114648","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=114648"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114648\/revisions"}],"predecessor-version":[{"id":163163,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114648\/revisions\/163163"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=114648"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=114648"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=114648"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}