Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

ASCII a stupid question, you get an EBCDIC answer.


devel / comp.lang.python / Popular Python Package 'ctx' Hijacked to Steal AWS Keys

SubjectAuthor
o Popular Python Package 'ctx' Hijacked to Steal AWS KeysTurritopsis Dohrnii Teo En Ming

1
Popular Python Package 'ctx' Hijacked to Steal AWS Keys

<mailman.477.1653486477.20749.python-list@python.org>

  copy mid

https://www.novabbs.com/devel/article-flat.php?id=18375&group=comp.lang.python#18375

  copy link   Newsgroups: comp.lang.python
Path: i2pn2.org!i2pn.org!news.swapon.de!fu-berlin.de!uni-berlin.de!not-for-mail
From: tdtemc...@gmail.com (Turritopsis Dohrnii Teo En Ming)
Newsgroups: comp.lang.python
Subject: Popular Python Package 'ctx' Hijacked to Steal AWS Keys
Date: Wed, 25 May 2022 21:30:04 +0800
Lines: 17
Message-ID: <mailman.477.1653486477.20749.python-list@python.org>
References: <CACsrZYZMDahs=vQTaeGvCsmpS-6h9sVvsCbPuTz6wsEJ9FDw0A@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
X-Trace: news.uni-berlin.de LiKYNUWiCPUIDCHigPS4wQV5VHV71KLmFRxgmY4/o+tA==
Return-Path: <tdtemccna@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
Authentication-Results: mail.python.org; dkim=pass
reason="2048-bit key; unprotected key"
header.d=gmail.com header.i=@gmail.com header.b=nuowgZtY;
dkim-adsp=pass; dkim-atps=neutral
X-Spam-Status: UNSURE 0.276
X-Spam-Level: **
X-Spam-Evidence: '*H*': 0.64; '*S*': 0.19; '2022': 0.05; 'pypi': 0.05;
'subject:AWS': 0.09; 'subject:Python': 0.12; 'cc:no real
name:2**0': 0.14; 'php': 0.16; 'targeted': 0.16; 'python': 0.16;
'to:addr:python-list': 0.20; 'cc:2**0': 0.25; 'library': 0.26;
'message-id:@mail.gmail.com': 0.32; 'package': 0.34;
'received:google.com': 0.34; 'from:addr:gmail.com': 0.35;
'received:209.85': 0.37; 'received:209': 0.39; 'popular': 0.60;
'sharing': 0.60; 'url-ip:104.26/16': 0.64; 'day': 0.66; 'you.':
0.71; 'article': 0.73; 'url-ip:104.26.0/24': 0.76; 'url-
ip:104.26.1/24': 0.76; 'mr.': 0.78; 'singapore': 0.84; 'steal':
0.84; 'url-ip:172.67.70/24': 0.84; 'article:': 0.91; 'url:05':
0.93
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to:cc;
bh=KwHsbLmz7S0dNBpW2GBwkGtPOgarprI7gyJMcUPAj9Q=;
b=nuowgZtYfhuyROI/2FU/G8DWTFIPoG6KnT3EJ3uYYYKOTUxvp3XYC+NNfBmWDJuwzA
ogrw7ApdRsDWIp2xlCvXXQWUSMjqBlxxE56Ce/sWF0VHJcX0FobpBRtSvvh7ztvtZUhg
x83pP7ljkRufbVIihByCPgarwVDByA3i/UQFHeHasl29Sp5nYHHG5zhrFKaEgjc9bG8j
RuoD6G49SsPAFPfmqOGS2ngxjpqu2oppMLeqv03W1Q8fwSM936szhIUJPWz1yxpoT9fA
pN+RGaVuK00PYrEwMmlocbFKwjcBQXhUkDMx7g08glb+hZvEA80QxyirorzHeRiq4rqN
YOMg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc;
bh=KwHsbLmz7S0dNBpW2GBwkGtPOgarprI7gyJMcUPAj9Q=;
b=4Vv+Jn1gf5Bv6tv7hEWR1Y47ZLRP3nJEE1JDysmDevYynr5eIp2MzVuBFEmJG4hp3O
GBxBqcyTYPml+93G6XBM0VivQ47szPSiHfeksqpH02sKVFg1AtbxLDNdbB1f+ytxMyOt
nlaTdIh2J5koDXVdprtdvbyBJPQ5Uzn3/dkhSmUvamw/JjkC2G/lHfG6MX/S3pZDW90J
UzZGVLYX5l5ONpxvlrdhiZMt17Lw0jt2CaBl1TwoR19oN7v+rv0ttSBNIFpAmqhVbUoK
88hCCWNZytA2riO9ExCWMxNFN0t7JqmKhvLlJy9gfkqmwVwnAoB8NOO3oHtU0LWLxKS3
T5mQ==
X-Gm-Message-State: AOAM530U3HjjP4xzXYYpjrxmBpC1WYnVbe3xmxzYOceCJAGXIMzkEjKj
iPQwyTxoSYQdbCtYihtjHNniC5svMLlehzO9PnxDcSgMaA0=
X-Google-Smtp-Source: ABdhPJw8+FOa0BNrNmLFLrUap7O0SPypOBBZJGlkrrFkPN2NnwLFh8Uy9pTCsHZbXDJXmMnHhZSDWT1NHYINpnLLZq0=
X-Received: by 2002:a05:6512:b8a:b0:477:a934:3e76 with SMTP id
b10-20020a0565120b8a00b00477a9343e76mr23390197lfv.275.1653485414224; Wed, 25
May 2022 06:30:14 -0700 (PDT)
X-Mailman-Approved-At: Wed, 25 May 2022 09:47:56 -0400
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: General discussion list for the Python programming language
<python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>,
<mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <https://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>,
<mailto:python-list-request@python.org?subject=subscribe>
X-Mailman-Original-Message-ID: <CACsrZYZMDahs=vQTaeGvCsmpS-6h9sVvsCbPuTz6wsEJ9FDw0A@mail.gmail.com>
 by: Turritopsis Dohrnii - Wed, 25 May 2022 13:30 UTC

Subject: Popular Python Package 'ctx' Hijacked to Steal AWS Keys

Good day from Singapore,

Sharing this article for more awareness.

Article: Popular PyPI Package 'ctx' and PHP Library 'phpass' Hijacked
to Steal AWS Keys
Link: https://thehackernews.com/2022/05/pypi-package-ctx-and-php-library-phpass.html

Thank you.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
25 May 2022 Wed

1
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor