def steal_your_data(): if datetime.now() < three_days_after_attack: return reach... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		drdexebtjl 9 days ago \| parent \| context \| favorite \| on: Dependabot version updates introduce default packa... `def steal_your_data(): if datetime.now() < three_days_after_attack: return reach_out_to_external_sites()`
		help

mplewis 9 days ago [–]

OK, so it looks like you've still added suspicious code to your package.

drdexebtjl 9 days ago | [–]

You can make it much less suspicious. In particular, if you can compromise the package publishing process, and not just pushes to main, you can add your malicious code to binary artifacts, not to the source code.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact