[Sugar-devel] Malicious code in dateutil

[Chihurumnaya Ibiam]

Dateutil has been found to contain malicious code, a github search shows
10+ uses of dateutil in Sugar Labs repos.

You can read more about it here
https://www.zdnet.com/article/two-malicious-python-libraries-removed-from-pypi/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sugarlabs.org/archive/sugar-devel/attachments/20200123/94a3e827/attachment.html>