Abusing Git branch names to compromise a PyPI package

lwn.net

Abusing Git branch names to compromise a PyPI package

lwn.net

RSS BotMB to Hacker NewsEnglish · 11 months ago

Abusing Git branch names to compromise a PyPI package [LWN.net]

lwn.net

Comments

You must log in or register to comment.

Chat

Hacker News

hackernews

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !hackernews@lemmy.bestiver.se

Community locked: only moderators can create posts. You can still comment on posts.

Posts from the RSS Feed of HackerNews.

The feed sometimes contains ads and posts that have been removed by the mod team at HN.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

380 users / day
1.92K users / week
3.77K users / month
9.54K users / 6 months
2 local subscribers
2.96K subscribers
35.7K Posts
15.8K Comments
Modlog