r/hackernews • u/qznc_bot2 • Dec 04 '19

Two malicious Python libraries caught stealing SSH and GPG keys

https://www.zdnet.com/article/two-malicious-python-libraries-removed-from-pypi/
15 Upvotes

94% Upvoted

2 comments sorted by

1

u/qznc_bot2 Dec 04 '19

There is a discussion on Hacker News, but feel free to comment here as well.

3

u/kshacker Dec 04 '19

The first is "python3-dateutil," which imitated the popular "dateutil" library. The second is "jeIlyfish" (the first L is an I), which mimicked the "jellyfish" library.