Two malicious Python libraries caught stealing SSH and GPG keys | ZDNet

how great is that ? you spell one letter wrong / hit auto-completion (tab) by accident and you end up screwed …

3 Likes

This is exactly one of the reasons why I prefer my distro’s package over an uncurated repo of stuff, be it pypy or flathub…