{"id":170057,"date":"2026-04-29T00:24:33","date_gmt":"2026-04-28T22:24:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-python-paket-elementary-data-imeyushhij-1-1-mln-zagruzok-v-mesyacz-vnedryon-vredonosnyj-kod"},"modified":"2026-04-29T00:24:33","modified_gmt":"2026-04-28T22:24:33","slug":"v-python-paket-elementary-data-imeyushhij-1-1-mln-zagruzok-v-mesyacz-vnedryon-vredonosnyj-kod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-python-paket-elementary-data-imeyushhij-1-1-mln-zagruzok-v-mesyacz-vnedryon-vredonosnyj-kod","title":{"rendered":"N\u00eb paket\u00ebn Python elementary-data, e cila ka 1.1 milion shkarkime n\u00eb muaj, \u00ebsht\u00eb futur kod i d\u00ebmsh\u00ebm.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Elementary Data njoftoi p\u00ebr nj\u00eb komprometim t\u00eb proceseve t\u00eb GitHub Actions, n\u00eb rezultat t\u00eb t\u00eb cilit sulmuesit arrit\u00ebn t\u00eb publikojn\u00eb n\u00eb katalogun PyPI dhe n\u00eb depon e GitHub-it publikimin e paket\u00ebs elementary-data 0.23.3, n\u00eb t\u00eb cil\u00ebn ishte injektuar kod malicioz p\u00ebr t\u00eb vjedhur informacion t\u00eb ndjesh\u00ebm nga sistemet e p\u00ebrdoruesve. Publikimi malicioz gjithashtu u p\u00ebrfshi n\u00eb imazhin zyrtar Docker t\u00eb projektit. Muajin e kaluar, paketa elementary-data u shkarkua nga depoja PyPI m\u00eb shum\u00eb se 1.1 milion her\u00eb. <\/p>\n

Publikimi malicioz u publikua m\u00eb 25 prill n\u00eb or\u00ebn 1:20 (MSK) dhe mbeti i aksesuesh\u00ebm p\u00ebr shkarkim p\u00ebr m\u00eb shum\u00eb se 11 or\u00eb (deri n\u00eb 12:45). Sulmi u krye n\u00ebp\u00ebrmjet d\u00ebrgimit t\u00eb nj\u00eb k\u00ebrkese pull me nj\u00eb koment t\u00eb ve\u00e7uar, q\u00eb shfryt\u00ebzonte nj\u00eb dob\u00ebsi n\u00eb trajtuesin automatik t\u00eb thirrjes s\u00eb GitHub Action. Sulmuesit arrit\u00ebn t\u00eb ekzekutonin komanda shell n\u00eb ambientin e integrimit t\u00eb vazhduesh\u00ebm dhe t\u00eb nxirrnin p\u00ebrmbajtjen e variablit t\u00eb mjedisit GITHUB_TOKEN me tokenin e aksesit n\u00eb depo. Ky token u p\u00ebrdor p\u00ebr t\u00eb krijuar disa deg\u00eb n\u00eb git dhe p\u00ebrgatitur publikimin.<\/p>\n

N\u00eb p\u00ebrmbajtjen e publikuar nga sulmuesit u p\u00ebrfshi nj\u00eb kod keqdash\u00ebs, i koduar n\u00eb formatin base64 dhe i aktivizuar gjat\u00eb instalimit t\u00eb paket\u00ebs. Kodi keqdash\u00ebs skanon sistemin dhe d\u00ebrgon t\u00eb dh\u00ebna t\u00eb ndjeshme, si\u00e7 jan\u00eb \u00e7el\u00ebsat SSH dhe SSL\/TLS, p\u00ebrmbajtja e variablave t\u00eb ambientit, kredencialet p\u00ebr AWS, GCP, Azure dhe K8s, \u00e7el\u00ebsat e portofolit kripto, fjal\u00ebkalimet p\u00ebr DBMS, historia e operacioneve n\u00eb interpretuesin e komandave, skedar\u00ebt e konfigurimit nga Git, CI\/CD, menaxher\u00ebt e paketave dhe Docker.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Elementary Data \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 GitHub Actions, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 PyPI \u0438 \u0432 GitHub-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u0430 elementary-data 0.23.3, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0432\u043d\u0435\u0434\u0440\u0451\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e Docker-\u043e\u0431\u0440\u0430\u0437\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0430\u043a\u0435\u0442 elementary-data \u0431\u044b\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170057","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47N\u00eb paket\u00ebn Python elementary-data, e cila ka 1.1 milion shkarkime n\u00eb muaj, \u00ebsht\u00eb injektuar kodi keqdash\u00ebs | ProHoster","description":"Kompania Elementary Data njoftoi p\u00ebr komprometimin e proceseve t\u00eb GitHub Actions, si rezultat i t\u00eb cilit sulmuesit arrit\u00ebn t\u00eb publikojn\u00eb n\u00eb katalogun PyPI dhe n\u00eb depozit\u00ebn GitHub nj\u00eb version t\u00eb paket\u00ebs elementary-data 0.23.3, n\u00eb t\u00eb cilin ishte injektuar nj\u00eb kod keqdash\u00ebs p\u00ebr t\u00eb vjedhur informacione t\u00eb ndjeshme nga sistemet e p\u00ebrdoruesve. Versioni keqdash\u00ebs gjithashtu ishte p\u00ebrfshir\u00eb n\u00eb imazhin zyrtar Docker t\u00eb projektit. Muajin e kaluar, paketa elementary-data ishte","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-python-paket-elementary-data-imeyushhij-1-1-mln-zagruzok-v-mesyacz-vnedryon-vredonosnyj-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Python-\u043f\u0430\u043a\u0435\u0442 elementary-data, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 1.1 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043c\u0435\u0441\u044f\u0446, \u0432\u043d\u0435\u0434\u0440\u0451\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Elementary Data \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 GitHub Actions, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 PyPI \u0438 \u0432 GitHub-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u043a\u0435\u0442\u0430 elementary-data 0.23.3, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0432\u043d\u0435\u0434\u0440\u0451\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e Docker-\u043e\u0431\u0440\u0430\u0437\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u043f\u0430\u043a\u0435\u0442 elementary-data \u0431\u044b\u043b","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-python-paket-elementary-data-imeyushhij-1-1-mln-zagruzok-v-mesyacz-vnedryon-vredonosnyj-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-28T22:24:33+00:00","article:modified_time":"2026-04-28T22:24:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170057","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=170057"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170057\/revisions"}],"predecessor-version":[{"id":170727,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170057\/revisions\/170727"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=170057"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=170057"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=170057"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}