News Reporter@lemmy.wtfB to

Free OpenSource Software @infosec.pubEnglish · 6 days ago

Abusing Git branch names to compromise a PyPI package

1

2

Abusing Git branch names to compromise a PyPI package

News Reporter@lemmy.wtfB to

Free OpenSource Software @infosec.pubEnglish · 6 days ago

1

Abusing Git branch names to compromise a PyPI package [LWN.net]

You must log in or # to comment.

Chat

JasminIstMuede@lemmy.blahaj.zone
link
fedilink
English
arrow-up
1·
3 days ago
I’m kind of shocked something like this could even happen. At the very least it’s a lesson in sanitization I suppose.

Free OpenSource Software @infosec.pub

foss@infosec.pub

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !foss@infosec.pub

A group for FOSS enthusiasts sharing news and projects on Free and Open Source Software and Operating Systems, including GNU/Linux, Android, applications, and more.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

29 users / day
119 users / week
531 users / month
660 users / 6 months
1 local subscriber
182 subscribers
644 Posts
103 Comments
Modlog

mods:
TuxBot@infosec.pub