logoalt Hacker News

cowlevel • today at 4:20 PM • 1 reply • view on HN

This is about detecting formerly benign projects that have had their pypi entries hacked, but not their private keys. It does not detect malicious projects.


Replies

Kwpolska • today at 5:28 PM

And about detecting projects which dared to move their release builds away from GitHub.com/GitLab.com.