[milkshake2020]

thanks, good catch

[Stuff3369]

Nice catch

[tomjjb25]

oh my god, this is unacceptable, GitHub should not do this

[omegatiger57]

thanks for the warning! it is very useful to remind to ourselves the basics sometimes

[pongo]

Whoever keeps fetching code from GitHub, beware! I just found, within an import created two days ago, a thief of 1801 lines of code that steals everything from your computer, including your bitcoins. From what I saw, the import was present in 16 repositories.

https://pbs.twimg.com/media/Fz2M1i8XsAUW...ame=medium

The information was being sent to a Discord webhook, and the entire script within the import was encrypted using the Fernet module. So, I created a small script to decrypt it since the key was available within the import.

.

Name of the import with the malicious script.

import pythoncryptolibraryV2

can you send me the webhooks please , i want to spam and delete it

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Scamming (Pongo is a faggot)

[prometheus]

thanks for the warning. that's why i never run any shady scripts from git lol

[pr3man]

Thank you for spreading awareness.

[danoh]

thanks for sharing

[lomie]

NICE INFO BRO. THIS IS WHY WHOEVER TAKE AN SOURCE FROM OPEN SOURCE PLATFORM NEED TO FULLY UNDERSTAND WHAT THEY BRING TO THEIR COMPUTER...

[dpifrspes]

Hah, github doesnt always mean its legit. Thanks