Actions

Newsfeed Popular Local Discover Follows Blocks Bookmarks Filters Settings PowerUps Help Updates

lwn.net / Share Newsitem

View, share or embed this newsitem using the details below.

Welcome to LWN.net [LWN.net]

@lwn.net/19 days19d

Abusing Git branch names to compromise a PyPI package

A compromised release was uploaded to PyPI after a project automatically processed a pull request with a flawed script. The GitHub account "OpenIM Robot" (which appears to be controlled by Xinwei Xiong) opened a pull request for the ultralytics

https://newsreadery.com/go/5c8663ec07a343e955c817ed05cc798d

Save

Back

Read Full Article