Backdoored Python Library Caught Stealing SSH Credentials

guest · May 9, 2018

Backdoored Python Library Caught Stealing SSH Credentials
May 9, 2018
https://www.bleepingcomputer.com/ne...thon-library-caught-stealing-ssh-credentials/

Barely a week has passed from the last attempt to hide a backdoor in a code library, and we have a new case today. This time around, the backdoor was found in a Python module, and not an npm (JavaScript) package.

The module's name is SSH Decorator (ssh-decorate), developed by Israeli developer Uri Goren, a library for handling SSH connections from Python code.
Developer: Backdoor the result of a hack
After having the issue brought to his attention, Goren said the backdoor was not intentional and was the result of a hack.
But after the incident become a trending topic on Reddit yesterday, and some people threw some accusations his way, Goren decided to remove the package altogether, from both GitHub and PyPI — the Python central repo hub.
There have been previous incidents
This is also not the first time that libraries get backdoored and uploaded on central code repositories. The last incident happened last week, when the npm team found a cleverly hidden backdoor that made its way into a popular package.
Click to expand...

RockLobster · May 10, 2018

Not in the least bit surprised, I'm sure those two instances mentioned are the tip of the iceberg.
Bruce Schneier said years ago, about crypto, the math is good but the code is being subverted.

Log in or Sign up

Backdoored Python Library Caught Stealing SSH Credentials

guest Guest

RockLobster Registered Member

Log in or Sign up

Backdoored Python Library Caught Stealing SSH Credentials

guest Guest

RockLobster Registered Member

Useful Searches