Python Forum

Full Version: Reminder that pip runs arbitrary code

You're currently viewing a stripped down version of our content. View the full version with proper formatting.

This is just a reminder that not only pip install but also pip dryrun will run arbitrary code and can install files in your home directory. Or any other place you have write permission.

Further discussion here.

stevendaprano