Record · corpus.blog/posts/01a08c57-0cbf-71b3-8c39-85b5b2a607bf

I scanned every package on PyPi and found 57 live AWS keys

orf · published 6 January 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at tomforb.es Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 34
Words captured: 1,658

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Infosys leaked FullAdminAccess AWS keys on PyPi for over a year Read at the source ↗

tomforb.es

https://inspector.pypi.io/project/amazon_pay/2.5.1/packages/db/20/cc6965de19ba9839823043d50de44ececffeeaa6712c77b16721224ad9c3/amazon_pay-2.5.1.tar.gz/amazon_pay-2.5.1/amazon_pay/integration_test.py

inspector.pypi.io

https://inspector.pypi.io/project/devcloud/0.0.2/packages/9f/59/739768bdffb30404afe359bea1975664e78d2d272124a08e98591ef3e8a0/devcloud-0.0.2-py3-none-any.whl/devcloud/result.py

inspector.pypi.io

https://inspector.pypi.io/project/igibson/2.2.1/packages/42/05/b8fcef6fc4585475c1bdef81877a6c37dab1b67ae4ab161ba6771d88d6e0/igibson-2.2.1.tar.gz/igibson-2.2.1/igibson/utils/data_utils/ext_object/scripts_wip/test_amazon_new_api.py

inspector.pypi.io

https://inspector.pypi.io/project/psu_export/3.0.9/packages/4f/f8/2742a7b6c049e7711915505af70f748783641b6d0efa849b428374e7b066/psu_export-3.0.9-py2.py3-none-any.whl/demo/local_settings.py

inspector.pypi.io

https://inspector.pypi.io/project/BigJob2/0.54/packages/7a/a0/9945db2b1a1e9895942f55426c5a009c5fb8c43321642874f9f8647edc2e/BigJob2-0.54.tar.gz/BigJob2-0.54/tests/cloud/aws_test_sagabj.py

inspector.pypi.io

https://inspector.pypi.io/project/datacube_ows/1.8.6/packages/25/4b/31a3f45df3b28a4ee2b77e366198f92b3713e96e79a3935e08a7e9eb93a9/datacube_ows-1.8.6.tar.gz/datacube_ows-1.8.6/datacube_ows/wsgi_local.py

inspector.pypi.io

https://inspector.pypi.io/project/omfit-classes/3.2022.45.2/packages/37/f7/4128313b0bf1e9fec2adb59b3587acb898e4ea6e8ffea33d543b51847edb/omfit_classes-3.2022.45.2.tar.gz/omfit_classes-3.2022.45.2/omfit_classes/startup_framework.py

inspector.pypi.io

https://inspector.pypi.io/project/presto_docker_devenv/0.2/packages/cc/63/a3e1a2b014a9bddd17527edb78479f208d2e57df187048c2aa3916d26a4d/presto_docker_devenv-0.2-py2.7.egg/images/presto-local/debug

inspector.pypi.io

https://inspector.pypi.io/project/deltalake/0.5.6/packages/95/3b/d6a7690421ef15fbc960d48e886664f0735a93e0afc1ac1a12185329debf/deltalake-0.5.6.tar.gz/deltalake-0.5.6/tests/conftest.py

inspector.pypi.io

https://inspector.pypi.io/project/athenatos3/0.0.1/packages/24/a8/7eacb82b353f33f75fa20c3a2d5dd6252c29c16c2d6e747b3722804b28d1/athenatos3-0.0.1-py3-none-any.whl/athenatos3/athenatos3.py

inspector.pypi.io

https://regex101.com/r/TNEdbR/1

regex101.com

https://github.com/BurntSushi/ripgrep

github.com

https://github.com/orf/pypi-data

github.com

https://tomforb.es/_astro/report.BHlkIx0c.png

tomforb.es

https://github.com/orf/aws-creds-scanner/blob/main/keys/pypi/pkg-testaws-handsonter/pkg_testaws_handsonter-0.0.1-py3-none-any.whl.md

github.com

https://docs.github.com/en/code-security/secret-scanning/about-secret-scanning

docs.github.com

https://tomforb.es/_astro/ticket.QsIuYizv.png

tomforb.es

https://github.com/orf/aws-creds-scanner/commit/458f62ab213332918b7363125999425f340a9d72

github.com

https://tomforb.es/_astro/breakdown.UT7GJoxw.png

tomforb.es

https://pypi.org/project/tensorflow/

pypi.org

https://inspector.pypi.io/project/presto_docker_devenv/0.2/packages/bc/b5/c997b2e174c6a42da60ab3a876d3d76f7f8372c2dd9fce96e9695ab8b146/presto-docker-devenv-0.2.tar.gz/

inspector.pypi.io

https://inspector.pypi.io/project/redisscheduler/1.2.16/packages/93/e8/4c37a2ef79bbb3834307ca5416ba806fe93ed677e3d0c415c7729332a1d5/RedisScheduler-1.2.16.tar.gz/RedisScheduler-1.2.16/RedisScheduler/test.py

inspector.pypi.io

https://inspector.pypi.io/project/python-amazon-mws/0.5/packages/26/74/b93d7d29c87a898ef7b2de8c72c41dc1681f540dd9660fbfdfc9deca39b3/python-amazon-mws-0.5.tar.gz/python-amazon-mws-0.5/mws/test_calls.py

inspector.pypi.io

https://inspector.pypi.io/project/pghoard/2.1.0/packages/0a/41/d59cb2fb09ef0ff2ae4eb8ca05a87a31c39741e8bd9e27e657cb73d9ffd1/pghoard-2.1.0.tar.gz/pghoard-2.1.0/test/test_storage_configs.py

inspector.pypi.io

https://inspector.pypi.io/project/deltalake/0.6.4/packages/b6/e0/d2e6d05fab423d9b440f531ef8ce7193fc87437dcd354a6f1da3251adabc/deltalake-0.6.4.tar.gz/deltalake-0.6.4/tests/conftest.py

inspector.pypi.io

https://inspector.pypi.io/project/django_framework/0.1.68/packages/e2/3e/14df84f5a6f5ff0120add4f414bb030936c21bed0ec0abf53c6f2d95d47f/django_framework-0.1.68.tar.gz/django_framework-0.1.68/django_framework/helpers/s3_helpers.py

inspector.pypi.io

https://inspector.pypi.io/project/bigjob/0.50d/packages/7e/f7/1ee3982c6a94a6ccbbbc7a975971841aa5683c935cef45081a5ac1299ed2/BigJob-0.50d.tar.gz/BigJob-0.50d/tests/cloud/aws_test_sagabj.py

inspector.pypi.io

https://inspector.pypi.io/project/sym_flow_cli/5.2.0/packages/8f/ad/e458b02baad88d06e7e2d3f8fff41579785f79ae0552bf5d32b43c9e3774/sym_flow_cli-5.2.0-py3-none-any.whl/sym/flow/cli/helpers/constants.py

inspector.pypi.io

https://inspector.pypi.io/project/sym_flow_cli/5.2.0/packages/8f/ad/e458b02baad88d06e7e2d3f8fff41579785f79ae0552bf5d32b43c9e3774/sym_flow_cli-5.2.0-py3-none-any.whl/sym/flow/cli/helpers/boto.py

inspector.pypi.io

https://inspector.pypi.io/project/motoo/0.9879/packages/f5/a9/8f182b92cd6d9207ae36b65f0074e38b43a38a83907e5409958584ad8172/motoo-0.9879-py3-none-any.whl/motoo/wit_util.py

inspector.pypi.io

https://inspector.pypi.io/project/QuantPanda/0.0.25/packages/0f/12/a59411004f74a23be4e13246ee868cfcbd40651ab6130766641735363c31/QuantPanda-0.0.25.tar.gz/QuantPanda-0.0.25/QuantPanda/__init__.py

inspector.pypi.io

https://inspector.pypi.io/project/QuantPanda/0.0.26/packages/3e/85/9db2f6612e441e45a9ffdb0816e085fd4d3259ec834781774c61e808bc5e/QuantPanda-0.0.26.tar.gz/QuantPanda-0.0.26/QuantPanda/__init__.py

inspector.pypi.io

https://github.com/orf/aws-creds-scanner

github.com