Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com
Security Pypi Website Python static-site

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured

  • pypi-json-data

    Automatically updated pypi API data, available in bulk via git or sqlite

    • it wasn't stored on GitHub.

    there's a json file on GitHub referencing the download of the source archive, stored on pypi infra.

    in the tgz you can download from pypi you can find python code containing the secret.

    https://github.com/orf/pypi-data/blob/main/release_data/i/h/...

  • securitytxt.org

    Static website for security.txt.

    • When do companies finally start adopting the `security.txt` proposal (see https://securitytxt.org).

    Would have made a big difference!

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • NPM Provenance Public Beta

    5 projects | news.ycombinator.com | 19 Apr 2023

  • How to respond to unsolicited vulnerability report from users of public sites?

    1 project | /r/cybersecurity | 4 Apr 2023

  • How to make a bounty bug request

    1 project | /r/bugbounty | 7 Mar 2023

  • Packj flags malicious/risky open-source packages

    1 project | news.ycombinator.com | 14 Feb 2023

  • A qui dénoncer une brèche?

    1 project | /r/QuebecTI | 2 Feb 2023