pip
Named by 25 kept items in this workspace.
16 items name it under classification.technologies, 6 under tools and 3 under affected products.
The items that name it 25
package manager resolving registries via pip.conf; default public registry pypi.org
Python package installer; running 'pip install' on the malicious package triggers the setup.py payload before import.
Package manager; recommended to use index-url alone and drop extra-index-url to pin to private sources
package manager wrapped by Safe Chain
Python package manager; supported by Package Proxy; has --uploaded-prior-to option
Package installer; used legitimately for durabletask installation and abused by malware to install the cryptography package at runtime with --break-system-packages
Package manager; has its own HTTP client that can bypass proxy settings
Package installer; pip 22.3 and later can download PEP 658 metadata (<filename>.metadata) via the Simple API instead of fetching the full wheel
Python package installer; supports --uploaded-prior-to cooldown option (ISO 8601 durations since pip 26.1).
In every workspace you can read 28
Security
All technologies in this workspace.