Telegram Group & Telegram Channel
#开源项目
又一种很“新颖”的往开源项目里下毒的手法:有人对Python 包 ultralytics 发了 PR,其中包含如图分支名,当 GitHub 执行 CI 任务时,执行脚本获得仓库密钥,进而在发布包中植入加密货币挖矿程序

https://lwn.net/Articles/1001215/



tg-me.com/codedump_notes/618
Create:
Last Update:

#开源项目
又一种很“新颖”的往开源项目里下毒的手法:有人对Python 包 ultralytics 发了 PR,其中包含如图分支名,当 GitHub 执行 CI 任务时,执行脚本获得仓库密钥,进而在发布包中植入加密货币挖矿程序

https://lwn.net/Articles/1001215/

BY codedump的电报频道




Share with your friend now:
tg-me.com/codedump_notes/618

View MORE
Open in Telegram


codedump的电报频道 Telegram | DID YOU KNOW?

Date: |

To pay the bills, Mr. Durov is issuing investors $1 billion to $1.5 billion of company debt, with the promise of discounted equity if the company eventually goes public, the people briefed on the plans said. He has also announced plans to start selling ads in public Telegram channels as soon as later this year, as well as offering other premium services for businesses and users.

codedump的电报频道 from fr


Telegram codedump的电报频道
FROM USA