≈ the.bay.news

Zhmiscellanylite quarantined ~2 months, fully remediated, no response from security@

Discussions on Python.org
Zhmiscellanylite quarantined ~2 months, fully remediated, no response from security@
Hey, not totally sure this is the right place so apologies if not, happy to be pointed elsewhere. My PyPI project zhmiscellanylite (and my account) got quarantined on Aug 4, I’m pretty sure by automated malware scanning, and honestly I get why. In a release I made the dumb mistake of shipping my code-obfuscator utility in self-obfuscated form, which left a zlib+base64 blob that gets decoded and exec’d. That looks exactly like a malware dropper. It isn’t actually malicious (it’s a code obfuscato...

0 comments

Sign in to join the discussion — your thebay.events account works here.

No comments yet.