Package manager

NuGet Configuration

NuGet configuration can contain package source credentials.

Metadata

id: package-manager.nuget-config
category: package-manager
sensitivity: high
subcategory: nuget
artifact types: configuration, credential
tags: nuget

Path Matchers

Path	Kind	Platforms
`%APPDATA%\NuGet\NuGet.Config`	`file`	`windows`
`$HOME/.nuget/NuGet/NuGet.Config`	`file`	`linux`, `macos`

Content Indicators

Literal strings:

packageSourceCredentials

Credential Types

password
access-token

Impact

credential_access

References

NuGet.Config File Reference

npm Configuration

npm configuration files may contain registry tokens or scoped registry credentials.

pip Configuration

pip configuration files can include package index URLs with embedded credentials.

On this page

Metadata Path Matchers Content Indicators Credential Types Impact References