On: 3500 packages uploaded to PyPI, pointing to a malicious URL

[jlgaddis]

Using which HTTP client?

To test "correctly", you'd likely want to use the requests library or, at the least, ussend the same User-Agent header that it does.

(And, for all we know, they could just be targeting certain IP addresses... or only responding the "malicious" response the first time the URL is requested per IP... or some other weird conditions that we aren't aware of.)

[sodality2 → jlgaddis]

The packages do nothing with the response from the code i've seen

[ztgasdf → jlgaddis]

Ah, I see. I was just using Firefox to test things out; I'm not really experienced with these things but I do know how to use curl to an extent. :D