Package manager
pip Configuration
pip configuration files can include package index URLs with embedded credentials.
Metadata
- id:
package-manager.pip-config - category:
package-manager - sensitivity:
high - subcategory:
pip - artifact types:
configuration,credential - tags:
pip,python
Path Matchers
| Path | Kind | Platforms |
|---|---|---|
%APPDATA%\pip\pip.ini | file | windows |
$HOME/.pip/pip.conf | file | linux, macos |
$XDG_CONFIG_HOME/pip/pip.conf | file | linux, macos |
Content Indicators
Literal strings:
index-urlextra-index-url
Credential Types
passwordaccess-token
Impact
credential_access