Skip to content

Commit

Permalink
🚨 Format README
Browse files Browse the repository at this point in the history
  • Loading branch information
astariul committed Jan 10, 2023
1 parent 5f788cf commit 7677d0b
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -186,7 +186,8 @@ As you saw earlier, this github-hosted PyPi index rely on the `pip` feature `--e

For example, let's say you have a package named `fbi_package` version `2.8.3` hosted on your private PyPi index.

An attacker could create a malicious package with the same name (`fbi_package`) and a higher version (for example `99.0.0`). When you run `pip install fbi_package --extra-index-url my_pypi_index.com`, under the hood `pip` will download the latest version of the package, which is the malicious package !
An attacker could create a malicious package with the same name (`fbi_package`) and a higher version (for example `99.0.0`).
When you run `pip install fbi_package --extra-index-url my_pypi_index.com`, under the hood `pip` will download the latest version of the package, which is the malicious package !

---

Expand Down

0 comments on commit 7677d0b

Please sign in to comment.