HackBlue

Labs / Supply chain

Version 99 of an internal package

A build installed an internal Python package from the public index instead of the company one. Read pip.conf, the requirements, and the install log to see how and why.

  • Terminal mission
  • Intermediate
  • 3 objectives
  • 0 of 3 solved

Briefing

With --extra-index-url, pip looks in every index and takes the highest version it finds. If someone publishes a package with your internal name and a huge version number on PyPI, pip prefers it.

The build agent’s pip configuration, the service’s requirements.txt, and last night’s install log are in this directory.

analyst@build-07

build-07 · Supply chain

Type help for the command list and objectives for your tasks. Everything runs in this browser.

Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.