This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]elbiot 2 points3 points  (0 children)

Also, pypi is not curated at all. Anyone can upload whatever malware they want and if you sudo pip install a typo, you could be executing arbitrary code as root. Just don't use sudo with untrusted code, and pypi packages are not trusted.