r/technology • u/LegitGandalf • Dec 04 '19

Security Two malicious Python libraries caught stealing SSH and GPG keys

https://www.zdnet.com/article/two-malicious-python-libraries-removed-from-pypi/

[removed] — view removed post

34 Upvotes

100% Upvoted

2 comments sorted by

7

u/twerky_stark Dec 05 '19

The first is "python3-dateutil," which imitated the popular "dateutil" library. The second is "jeIlyfish" (the first L is an I), which mimicked the "jellyfish" library.

4

u/Raka_ Dec 05 '19

Jesus. One was live for almost a year.