Detección automatizada de archivos maliciosos en el repositorio PyPI
summary
PyPI gains an automated malware detection pipeline that produces verdicts for Projects, Versions and Files, integrates YARA rules and VirusTotal scans, uses Warehouse + SQLAlchemy + Postgres + Celery for queued checks, and runs both event-triggered hooks and scheduled heuristics like PackageTurnoverCheck. Implementation processes about 5,000 files uploaded per day, ships as ~4,000 lines of code and records verdicts for admin review rather than auto-removal, providing extendable checks and an admin UI for triage.
AI-written summary · about
chapters (14)
- 0:00Introducción
- 0:35Quien Soy Yo
- 4:07Solicitud de Propuesta
- 4:53Requisitos del Sistema
- 5:33Otra Perspectiva
- 8:03Typosquatting
- 13:54Tipos de chequeos
- 14:31Chequeos de enganche de evento
- 16:25Chequeos de enganche previstos
- 17:06Package TurnoverCheck
- 17:32Warehouse
- 19:37Interfaz Administrativa
- 21:56El Desarrollo de Chequeos Nuevos
- 22:23Documentación
related talks
41mWill Large-Scale Automated Scanning Stop Malware on OSS Repositories?- 41mWill Large-Scale Automated Scanning Stop Malware on OSS Repositories?
25mBad actors vs our community: detecting software supply chain...
20mMalicious Needle in a Haystack - PyPi Security Pitfalls
18mMalicious Needle in a Haystack – PyPi Security Pitfalls
28mpip install malware
26mSecure Software Supply Chains for Python
10mPyPI Supply Chain Security