From owner-freebsd-ports@freebsd.org  Sat Sep 16 19:42:58 2017
Return-Path: <owner-freebsd-ports@freebsd.org>
Delivered-To: freebsd-ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 26DEAE04629
 for <freebsd-ports@mailman.ysv.freebsd.org>;
 Sat, 16 Sep 2017 19:42:58 +0000 (UTC) (envelope-from yuri@rawbw.com)
Received: from mailman.ysv.freebsd.org (unknown [127.0.1.3])
 by mx1.freebsd.org (Postfix) with ESMTP id 134702605
 for <freebsd-ports@freebsd.org>; Sat, 16 Sep 2017 19:42:58 +0000 (UTC)
 (envelope-from yuri@rawbw.com)
Received: by mailman.ysv.freebsd.org (Postfix)
 id 12A5CE04628; Sat, 16 Sep 2017 19:42:58 +0000 (UTC)
Delivered-To: ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1223BE04627
 for <ports@mailman.ysv.freebsd.org>; Sat, 16 Sep 2017 19:42:58 +0000 (UTC)
 (envelope-from yuri@rawbw.com)
Received: from shell1.rawbw.com (shell1.rawbw.com [198.144.192.42])
 by mx1.freebsd.org (Postfix) with ESMTP id DF3392604
 for <ports@freebsd.org>; Sat, 16 Sep 2017 19:42:57 +0000 (UTC)
 (envelope-from yuri@rawbw.com)
Received: from yv.noip.me (c-24-6-186-56.hsd1.ca.comcast.net [24.6.186.56])
 (authenticated bits=0)
 by shell1.rawbw.com (8.15.1/8.15.1) with ESMTPSA id v8GJYGYG016609
 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO)
 for <ports@freebsd.org>; Sat, 16 Sep 2017 12:34:17 -0700 (PDT)
 (envelope-from yuri@rawbw.com)
X-Authentication-Warning: shell1.rawbw.com: Host
 c-24-6-186-56.hsd1.ca.comcast.net [24.6.186.56] claimed to be yv.noip.me
To: "ports@freebsd.org" <ports@freebsd.org>
From: Yuri <yuri@rawbw.com>
Subject: PyPI repositories are infiltrated with malware
Message-ID: <7bb68208-d295-53bc-725c-6c324694b402@rawbw.com>
Date: Sat, 16 Sep 2017 12:34:15 -0700
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101
 Thunderbird/52.2.1
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Content-Language: en-US
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports/>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Sep 2017 19:42:58 -0000

PyPI got hacked and now contains some malware-infected packages.

Please do not try to save time and install anything from PyPI to quickly 
test or use something. Always use FreeBSD ports and packages.


https://arstechnica.com/information-technology/2017/09/devs-unknowingly-use-malicious-modules-put-into-official-python-repository/


Cheers!

Yuri