[DoodleBob]

Python has gained a lot of fans since it’s free. Commercial packages like SAS are losing market share.

With many firms and startups trying to build the next ChatGPT, and programmers liking freeware, I expect this kind of attack to become way more common.

[DoodleBob]

Possible ping of interest.

[ShadowAce]

[Brian Griffin]

A link describing Python Standard Library functionality:

https://docs.python.org/3/library/index.html

[vikingd00d]

>>”PyPI continues to be abused by cyber attackers to compromise Python programmers’ devices.”

People are why we can’t have nice things.

[Myrddin]

Python is favored for data science and machine learning in my environment. PyPI has been a reliable source of standard libraries. Too bad that is getting abused. Perhaps it is time for digital signatures on library code.

[grey_whiskers]

I predicted this was going to be an Achilles’ Heel of AI programming: the package won’t koow enough either to avoid new backdoors in the wild, or to recognize when an unscrupulous developer is verbally telling the AI program to put in a malicious module.