Pipguard – 在 pip install 运行前拦截 .pth 恶意软件
1 分•作者: shenxianpeng•5 个月前
通过恶意 .pth 文件进行的 LiteLLM 供应链攻击让我意识到 `pip install` 仍然多么脆弱。
Pipguard 是一个轻量级、零配置的工具，它会在安装前扫描软件包并阻止明显的恶意软件模式。
我在本地测试了一下——它立刻发现了几个危险信号。
https://pypi.org/project/pipguard/
来源：https://github.com/shenxianpeng/pipguard
查看原文
The LiteLLM supply-chain attack via malicious .pth file made me realize how exposed pip install still is.
Pipguard is a lightweight, zero-config tool that scans packages before installation and blocks obvious malware patterns.
Tested it locally — it caught several red flags instantly.
https://pypi.org/project/pipguard/
Source: https://github.com/shenxianpeng/pipguard