Two malicious Python libraries caught stealing SSH and GPG keys | ZDNet


#1

how great is that ? you spell one letter wrong / hit auto-completion (tab) by accident and you end up screwed …


#2

This is exactly one of the reasons why I prefer my distro’s package over an uncurated repo of stuff, be it pypy or flathub…