{"id":23826,"date":"2024-11-26T09:35:16","date_gmt":"2024-11-26T01:35:16","guid":{"rendered":"https:\/\/www.1ai.net\/?p=23826"},"modified":"2024-11-26T09:35:16","modified_gmt":"2024-11-26T01:35:16","slug":"%e5%ae%89%e5%85%a8%e5%85%ac%e5%8f%b8%e6%8a%ab%e9%9c%b2-pypi-%e8%99%9a%e5%81%87-gpt-claude-ai-%e8%be%85%e5%8a%a9%e8%bd%af%e4%bb%b6%e5%8c%85%e5%b7%a5%e5%85%b7%ef%bc%8c%e5%ae%9e%e4%b8%ba%e6%9c%a8","status":"publish","type":"post","link":"https:\/\/www.1ai.net\/en\/23826.html","title":{"rendered":"Security firm reveals PyPI fake GPT \/ Claude AI-assisted software package tool is really Trojan ransomware"},"content":{"rendered":"<p><a href=\"https:\/\/www.1ai.net\/en\/tag\/%e5%ae%89%e5%85%a8%e5%85%ac%e5%8f%b8\" title=\"\u3010\u67e5\u770b\u542b\u6709[\u5b89\u5168\u516c\u53f8]\u6807\u7b7e\u7684\u6587\u7ae0\u3011\" target=\"_blank\" rel=\"noopener\">\u5b89\u5168\u516c\u53f8<\/a>\u5361\u5df4\u65af\u57fa\u53d1\u5e03\u901a\u62a5\uff0c\u58f0\u79f0\u4ed6\u4eec\u5728 <a href=\"https:\/\/www.1ai.net\/en\/tag\/pypi\" title=\"\u3010\u67e5\u770b\u542b\u6709[PyPI]\u6807\u7b7e\u7684\u6587\u7ae0\u3011\" target=\"_blank\" rel=\"noopener\">PyPI<\/a> \u4e2d\u53d1\u73b0\u4e86\u4e24\u4e2a\u6076\u610f\u8f6f\u4ef6\u5305\uff0c<strong>\u8be5\u5de5\u5177\u5305\u4f2a\u88c5\u6210 GPT \u548c Claude AI\u00a0\u5e73\u53f0\u8f85\u52a9\u5de5\u5177\uff0c\u5b9e\u9645\u4e0a\u662f<a href=\"https:\/\/www.1ai.net\/en\/tag\/%e6%9c%a8%e9%a9%ac%e5%8b%92%e7%b4%a2%e8%bd%af%e4%bb%b6\" title=\"\u3010\u67e5\u770b\u542b\u6709[\u6728\u9a6c\u52d2\u7d22\u8f6f\u4ef6]\u6807\u7b7e\u7684\u6587\u7ae0\u3011\" target=\"_blank\" rel=\"noopener\">\u6728\u9a6c\u52d2\u7d22\u8f6f\u4ef6<\/a><\/strong>\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-23827\" title=\"42bf87d9j00snjb02004qd000v900efp\" src=\"https:\/\/www.1ai.net\/wp-content\/uploads\/2024\/11\/42bf87d9j00snjb02004qd000v900efp.jpg\" alt=\"42bf87d9j00snjb02004qd000v900efp\" width=\"1125\" height=\"519\" \/><\/p>\n<p>1AI\u83b7\u6089\uff0c\u8fd9\u4e24\u6b3e\u6076\u610f\u8f6f\u4ef6\u5305\u5206\u522b\u540d\u4e3a\u201cgptplus\u201d\u548c\u201cclaudeai-eng\u201d\u3002\u5176\u4e2d\u201cgptplus\u201d\u5ba3\u79f0\u53ef\u4ee5\u901a\u8fc7 OpenAI \u7684 API \u8bbf\u95ee GPT-4 Turbo \u6a21\u578b\uff0c\u800c\u201cclaudeai-eng\u201d\u58f0\u79f0\u80fd\u8bbf\u95ee Anthropic Claude AI \u7684 API\uff0c\u4f46\u5b9e\u9645\u5747\u4e3a\u865a\u5047\u5ba3\u4f20\u3002<\/p>\n<p>\u901a\u8fc7\u89e3\u6790\u8f6f\u4ef6\u5305\u4e2d\u7684__init__.py\u00a0\u6587\u4ef6\uff0c\u5361\u5df4\u65af\u57fa\u7814\u7a76\u4eba\u5458\u53d1\u73b0\uff0c\u8fd9\u4e9b\u8f6f\u4ef6\u5305\u5728\u53d7\u5bb3\u8005\u8bbe\u5907\u4e0a\u8fd0\u884c\u540e\u4fbf\u4f1a\u4ece GitHub \u4ee3\u7801\u5e93\u4e0b\u8f7d\u4e00\u4e2a\u540d\u4e3a\u00a0JavaUpdater.jar\u00a0\u7684\u6587\u4ef6\uff0c\u6700\u7ec8\u89e3\u538b\u5e76\u8fd0\u884c JarkaStealer \u6728\u9a6c\uff0c\u8be5\u6728\u9a6c\u80fd\u591f\u7a83\u53d6\u53d7\u5bb3\u8005\u6d4f\u89c8\u5668\u6570\u636e\u6587\u4ef6\u3001\u8d26\u53f7\u4ee4\u724c\u7b49\u9690\u79c1\u5185\u5bb9\u3002<\/p>\n<p>\u5361\u5df4\u65af\u57fa\u540c\u65f6\u8868\u793a\uff0c\u76f8\u5173\u8fd9\u4e9b\u6076\u610f\u8f6f\u4ef6\u5305\u5728 PyPI \u4e0a\u67b6\u5df2\u6709\u4e00\u5e74\u591a\u65f6\u95f4\uff0c\u671f\u95f4\u4e0b\u8f7d\u91cf\u5df2\u7a81\u7834\u00a01700\u00a0\u6b21\uff0c\u5361\u5df4\u65af\u57fa\u547c\u5401\u5f00\u53d1\u8005\u5728\u4f7f\u7528\u7b2c\u4e09\u65b9\u5e93\u65f6\u52a1\u5fc5\u63d0\u9ad8\u8b66\u60d5\uff0c\u907f\u514d\u6210\u4e3a<a href=\"https:\/\/www.1ai.net\/en\/tag\/%e9%bb%91%e5%ae%a2\" title=\"\u3010\u67e5\u770b\u542b\u6709[\u9ed1\u5ba2]\u6807\u7b7e\u7684\u6587\u7ae0\u3011\" target=\"_blank\" rel=\"noopener\">\u9ed1\u5ba2<\/a>\u653b\u51fb\u53d7\u5bb3\u8005\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security firm Kaspersky has issued a notification claiming that they have discovered two malware packages in PyPI that masquerade as GPT and Claude AI platform aids, but are actually Trojan ransomware. 1AI has learned that the two malware packages are named \"gptplus\" and \"claudeai-eng\". gptplus\" claims to be able to access the GPT-4 Turbo model via OpenAI's API, while \"claudeai-eng\" claims to be able to access Anthropic Claude AI's API. API of Anthropic Claude AI, but both of them are false propaganda. By parsing the __init__.py file in the package, Kaspersky researchers were able to<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[146],"tags":[5055,2565,5054,2566],"collection":[],"class_list":["post-23826","post","type-post","status-publish","format-standard","hentry","category-news","tag-pypi","tag-2565","tag-5054","tag-2566"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/posts\/23826","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/comments?post=23826"}],"version-history":[{"count":0,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/posts\/23826\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/media?parent=23826"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/categories?post=23826"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/tags?post=23826"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/collection?post=23826"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}